High
Security advisory
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-14019
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 10:50 UTC · Revision 1
Source evidence
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
osv:CVE-2020-14019
Complete source record
{
"id": "25dc22c9274082626e67cf3df069e2d26de82f016806ba03412f854b15205d74",
"url": "https://osv.dev/vulnerability/CVE-2020-14019",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-14019",
"summary": "Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.",
"evidence": "osv:CVE-2020-14019",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-14019",
"aliases": [
"CVE-2020-14019",
"GHSA-cpcw-p965-wpqx",
"PYSEC-2020-250"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/open-iscsi/rtslib-fb",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "a638b771f189fcede260c007b55184340347e7b0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:rtslib-fb_project:rtslib-fb:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.1.72"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v2.1.72",
"v2.1.71",
"v2.1.70",
"v2.1.fb69",
"v2.1.fb68",
"v2.1.fb67",
"v2.1.fb66",
"v2.1.fb65",
"v2.1.fb64",
"v2.1.fb63",
"v2.1.fb62",
"v2.1.fb61",
"v2.1.fb60",
"v2.1.fb59",
"v2.1.fb58",
"v2.1.fb57",
"v2.1.fb56",
"v2.1.fb55",
"v2.1.fb54",
"v2.1.fb53",
"v2.1.fb52",
"v2.1.fb51",
"v2.1.fb50",
"v2.1.fb49",
"v2.1.fb48",
"v2.1.fb47",
"v2.1.fb46",
"v2.1.fb45",
"v2.1.fb44",
"v2.1.fb43",
"v2.1.fb42",
"v2.1.fb41",
"v2.1.fb40",
"v2.1.fb39",
"v2.1.fb38",
"v2.1.fb37",
"v2.1.fb36",
"v2.1.fb35",
"v2.1.fb34",
"v2.1.fb33",
"v2.1.fb32",
"v2.1.fb31",
"v2.1.fb30",
"v2.1.fb29",
"v2.1.fb28",
"v2.1.fb27",
"v2.1.fb26",
"v2.1.fb25",
"v2.1.fb24",
"v2.1.fb23",
"v2.1.fb22",
"v2.1.fb21",
"v2.1.fb20",
"v2.1.fb19",
"v2.1.fb18",
"v2.1.fb17",
"v2.1.fb16",
"v2.1.fb15",
"v2.1.fb14",
"v2.1.fb13",
"v2.1.fb12",
"v2.1.fb11",
"v2.1.fb10",
"v2.1.fb9",
"v2.1.fb8",
"v2.1.fb7",
"v2.1.fb6",
"v2.1.fb5",
"v2.1.fb4",
"v2.1.fb3",
"v2.1.fb2",
"v2.1.fb1",
"2.1",
"2.0",
"1.99",
"1.95",
"1.90"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14019.json"
}
}
],
"modified": "2026-10-20T10:51:49.349068630Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNMCV2DJJTX345YYBXAMJBXNNVUZQ5UH/",
"https://github.com/open-iscsi/rtslib-fb/pull/162"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2020-14019",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 383004,
"published_at": "2020-06-19T11:15:10.26+00:00"
}