CVE-2020-13867

Name of the Vulnerable Software and Affected Versions Open-iSCSI targetcli-fb versions 2.1.52 and earlier

Description The issue is related to weak permissions for the /etc/target directory, as well as the backup directory and backup files. This weakness can be exploited to gain access to confidential data.

Recommendations For Open-iSCSI targetcli-fb versions 2.1.52 and earlier, consider restricting access to the /etc/target directory and its backup files to minimize the risk of exploitation. As a temporary workaround, review and adjust the permissions of the /etc/target directory and its contents until a patch is available.