{"id":"CVE-2020-10699","aliases":["ALPINE-CVE-2020-10699","EUVD-2020-3130","GHSA-pvmm-475g-fx2h","RHSA-2020:1933","UBUNTU-CVE-2020-10699","USN-4871-1","openSUSE-SU-2024:11423-1"],"status":"published","title":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by...","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00335,"percentile":0.27149,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2020-04-15T00:00:00Z","modified":"2026-11-03T06:31:39Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"targetcli","fixed_in":["2.1.53-r0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"targetcli","fixed_in":["0:2.1.51-4.el8_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"targetcli-fb","fixed_in":["1:2.1.51-0ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.53-r0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.51-4.el8_2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"targetcli-fb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.51-0ubuntu1+esm1"}]}],"versions":["2.1.fb49-1","1:2.1.51-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"targetcli-fb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.51-0ubuntu1+esm1"}]}],"versions":["2.1.fb49-1","1:2.1.51-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"targetcli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.54-1.2"}]}],"bundled":2}],"products":[{"vendor":"datera, inc","product":"targetcli"},{"vendor":"targetcli-fb_project","product":"targetcli-fb"}],"references":[{"url":"https://security.gentoo.org/glsa/202008-22","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10699","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/open-iscsi/targetcli-fb/issues/162","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10699","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pvmm-475g-fx2h"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-10699","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1933","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819219","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1933.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10699","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2020-10699","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4871-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-13867","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13867","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10699","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T00:00:00Z","modified":"2024-08-04T11:06:11.137Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3130","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T00:00:00Z","modified":"2024-08-04T11:06:11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-pvmm-475g-fx2h","title":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by...","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2022-05-24T17:14:38Z","modified":"2023-01-28T05:07:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:44:33.554453Z"}],"nvd":[{"id":"CVE-2020-10699","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T14:15:19.873Z","modified":"2026-06-17T02:48:16.69Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:05:57.678762Z"}],"osv":[{"id":"ALPINE-CVE-2020-10699","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T14:15:19.873Z","modified":"2026-11-03T06:31:39.746350347Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2020-10699","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T14:15:19.873Z","modified":"2026-10-20T10:51:25.752925921Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"RHSA-2020:1933","title":"Red Hat Security Advisory: targetcli security update","status":"published","published":"2024-09-16T03:59:45Z","modified":"2025-11-22T12:00:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2020-10699","description":"A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root.","status":"published","published":"2020-04-15T14:15:00Z","modified":"2026-02-04T02:57:04.144748Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"openSUSE-SU-2024:11423-1","title":"python36-targetcli-fb-2.1.54-1.2 on GA media","description":"These are all security issues fixed in the python36-targetcli-fb-2.1.54-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:27.771377Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-4871-1","title":"targetcli-fb vulnerabilities","description":"It was discovered that targetcli-fb did not properly manage socket\npermissions. A local attacker could use this issue to modify the iSCSI\nconfiguration resulting in a denial of service, obtain sensitive \ninformation or execute arbitrary code. (CVE-2020-10699)\n\nIt was discovered that targetcli-fb did not properly manage permissions for \n/etc/target and underneath backup directory/files. An attacker could use\nthis issue to access sensitive information. (CVE-2020-13867)\n","status":"published","published":"2021-03-15T23:00:07Z","modified":"2026-02-10T04:42:06Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}