Non évaluée
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the...
CVE-2020-10699
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.
Références
- advisory github.com
- advisory security.gentoo.org
- patch bugzilla.redhat.com