Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iSCSI不安全配置文件权限本地信息泄露漏洞
Vulnerability Description
iSCSI（小型计算机系统接口）是一种支持通过TCP/IP网络访问存储设备的协议，它有助于实现跨组织进行存储合并和共享存储资源。iSCSI主要的验证机制使用CHAP协议。 iSCSI的Linux实现存在配置问题，本地攻击者可以利用这个漏洞获得验证密码等敏感信息。 iSCSI的Linux实现中的配置信息保存在/etc/iscsi.conf中，这个文件默认情况下以全局可读和可能全局可写的属性进行安装，任意本地用户可以通过查看这个配置文件获得CHAP验证密码等敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A