Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Alexmurray

#35228of 56,326
7.8Total CVSS
Vulnerabilities · 1
PT-2020-2417
7.8
2020-04-15
Linux · Targetcli-Fb · CVE-2020-10699
**Name of the Vulnerable Software and Affected Versions** Linux targetcli-fb versions 2.1.50 through 2.1.51 **Description** A flaw in the targetcli-fb component of Linux allows a local attacker to escalate their privileges to root due to inadequate access control. The issue is related to the world-writable socket used by targetclid, which can be exploited to modify the iSCSI configuration if the targetclid socket is enabled. **Recommendations** For Linux targetcli-fb versions 2.1.50 and 2.1.51, consider restricting access to the targetclid socket to prevent exploitation until a patch is available. As a temporary workaround, consider disabling the targetclid socket until a fix is provided to prevent privilege escalation.