open-iscsi/rtslib-fb

open-iscsi/rtslib-fb

GitHubGitHub
GitHubgithub.com
Releases91
Frequency1 month 4 weeks
Last Release
Stars77
Python library for configuring the Linux kernel-based multiprotocol SCSI target (LIO)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-14019↗
7.8 HIGH4.6 MEDIUM

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.