Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-14019

Опубликовано: 19 июн. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 7.8

Описание

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

released

2.1.73-1ubuntu3
eoan

ignored

end of life
esm-apps/bionic

not-affected

code not present
esm-apps/focal

needed

esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed
groovy

released

2.1.73-1ubuntu3
hirsute

released

2.1.73-1ubuntu3

Показывать по

EPSS

Процентиль: 29%
0.00103
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 6.6
redhat
больше 5 лет назад

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

CVSS3: 7.8
nvd
больше 5 лет назад

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

CVSS3: 7.8
debian
больше 5 лет назад

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/targ ...

suse-cvrf
больше 5 лет назад

Security update for python-rtslib-fb

suse-cvrf
больше 5 лет назад

Security update for python-rtslib-fb

EPSS

Процентиль: 29%
0.00103
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3