CVE-2020-14019

mediumPriorität · verfolgen · 31OT-Risiko · erhöhtEPSS 0.003 · 28. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.34% (28th) EPSS

CVSS 4.6 · medium

Is it mine?

22 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenpython-rtslib-0:2.1.73-2.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2020:4505
Behobenpython3-rtslib-0:2.1.73-2.el8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2020:4505
Behobentarget-restore-0:2.1.73-2.el8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2020:4505
Behobenpython-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435
Behobenpython-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5435

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.6–7.8

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 6.4

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · OSV

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.6mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:Lsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-276USprimärCWE-276USCWE-276USCWE-282US

betroffene Produkte (22)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.7.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.6.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.5.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.4.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.1.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.0.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.3.0fstec_bduRU
Red Hat Inc. Red Hat Process Automation Manager≤ 7.2.0fstec_bduRU
Сообщество свободного программного обеспечения rtslib-fb≤ 2.1.72fstec_bduRU
rtslib-fb project rtslib-fb≤ 2.1.72nvdUScpe:2.3:a:rtslib-fb_project:rtslib-fb:*:*:*:*:*:*:*:*
PyPI rtslib-fb< 2.1.73osvUSpkg:pypi/rtslib-fb
python-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Client (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-0:2.1.74-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)alle Versionenfixedredhat_csafUS
python-rtslib-doc-0:2.1.74-1.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)alle Versionenfixedredhat_csafUS

20 von 22 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

RHEA-2020:4505Red Hat Enhancement Advisory: python-rtslib bug fix and enhancement update2020-11-04csaf · redhat_csafUS
An update for python-rtslib is now available for Red Hat Enterprise Linux 8.
RHSA-2020:5435Red Hat Security Advisory: python-rtslib security update2020-12-15csaf · redhat_csafUS
An update for python-rtslib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
GHSA-cpcw-p965-wpqxrtslib-fb weak permissions for /etc/target/saveconfig.json file2022-05-24ghsa · osvUS
Python rtslib-fb through 2.1.72 has weak permissions for `/etc/target/saveconfig.json` because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
PYSEC-2020-2502020-06-19vendor · osvUS
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.

auch bekannt als (7)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2020-06-19geändert 2026-06-17

verwandt (2,184)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-87886US	—OT kritisch	0.23% (14th)	KEV	2026-09-17
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Ba…
CVE-2025-24085US	critical10.0OT kritisch	17.5% (97th)	KEV	2025-01-27
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS…
CVE-2024-55956US	critical9.8OT kritisch	94.0% (100th)	KEV	2024-12-13
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the…
CVE-2024-51378US	critical9.8OT kritisch	94.7% (100th)	KEV	2024-10-29
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /…
CVE-2023-29360US	—OT kritisch	21.6% (98th)	KEV	2023-06-14
Microsoft Streaming Service Elevation of Privilege Vulnerability

+2179 weitere

Referenzen (17)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan