Unrated
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the...
CVE-2020-10699
First seen on SecPulse
Original description The description as published by the source.
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.
References
- advisory github.com
- advisory security.gentoo.org
- patch bugzilla.redhat.com