CVE-2020-14019
python-rtslib: weak permissions for /etc/target/saveconfig.json
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products