CVE-2020-14019

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus…

published June 19, 2020

CVSS
—
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Published
2020-06-19T10:49Z
EPSS history
Timeline
  • 19 JUN 10:49Z
    Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus…
    cvelistv5