Design/Logic Flaw

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...

CVE-2020-8290

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...

CVE-2020-8290

CVE-2020-8290 affects Backblaze for Windows and macOS prior to version 7.0.0.439. The root cause is improper privilege management in the bztransmit helper, specifically lack of permission handling and validation when creating the client update directory (bzupdates). This enables a local unprivile...

CVE-2020-8289

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...

CVE-2020-8289

Backblaze for Windows prior to 7.0.1.433 and macOS prior to 7.0.1.434 suffers from improper certificate validation in the bztransmit helper, due to a hardcoded whitelist of strings in URLs that disables SSL checks (e.g., api/clientversion.xml, api/install_backblaze, and certain backblaze domains)...

Backblaze 信任管理问题漏洞

Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...

Backblaze 权限许可和访问控制问题漏洞

Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A privilege permission and access control issue vulnerability exists in Backblaze for Windows and Backblaze for macOS prior to version 7.0.0.439, which stems from a lack of privilege handling and validation prior to th...

Exploit for Improper Privilege Management in Backblaze

CVE-2020-8290 – Elevation of Privilege in Backblaze Summar...

Exploit for Improper Certificate Validation in Backblaze

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backb...

backblaze.com XSS vulnerability

Vulnerable URL: https://www.backblaze.com/blog/wppgphotogallery/gallery41/?pagename=wppgphotogallery/gallery41page=2 Details: Description| Value ---|--- Patched:| Yes, at 21.09.2017 Latest check for patch:| 21.09.2017 11:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...