[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2021-1589 --- python-rtslib

ID: oval:org.secpod.oval:def:1700546Date: (C)2021-01-28   (M)2023-11-13
Class: PATCHFamily: unix




A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.json because the shutil.copyfile, instead of shutil.copy is used, and permissions are not preserved upon editing. This flaw allows an attacker with prior access to /etc/target/saveconfig.json to access a later version, resulting in a loss of integrity, depending on their permission settings. The highest threat from this vulnerability is to confidentiality

Platform:
Amazon Linux 2
Product:
python-rtslib
Reference:
ALAS2-2021-1589
CVE-2020-14019
CVE    1
CVE-2020-14019
CPE    2
cpe:/a:open-iscsi:singularity
cpe:/o:amazon:linux:2

© SecPod Technologies