未評価
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the...
CVE-2020-10699
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.
参照URL
- advisory github.com
- advisory security.gentoo.org
- patch bugzilla.redhat.com