96 matches found
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
Hardcoded credentials
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
Design/Logic Flaw
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8289
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8290
CVE-2020-8290 affects Backblaze for Windows and macOS prior to version 7.0.0.439. The root cause is improper privilege management in the bztransmit helper, specifically lack of permission handling and validation when creating the client update directory (bzupdates). This enables a local unprivile...
CVE-2020-8289
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
CVE-2020-8289
Backblaze for Windows prior to 7.0.1.433 and macOS prior to 7.0.1.434 suffers from improper certificate validation in the bztransmit helper, due to a hardcoded whitelist of strings in URLs that disables SSL checks (e.g., api/clientversion.xml, api/install_backblaze, and certain backblaze domains)...
CVE-2020-8290: Improper Privilege Management
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8289: Improper Certificate Validation
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
Backblaze 信任管理问题漏洞
Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...
Backblaze 权限许可和访问控制问题漏洞
Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A privilege permission and access control issue vulnerability exists in Backblaze for Windows and Backblaze for macOS prior to version 7.0.0.439, which stems from a lack of privilege handling and validation prior to th...
Exploit for Improper Privilege Management in Backblaze
CVE-2020-8290 – Elevation of Privilege in Backblaze Summar...
Exploit for Improper Certificate Validation in Backblaze
CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backb...
backblaze.com XSS vulnerability
Vulnerable URL: https://www.backblaze.com/blog/wppgphotogallery/gallery41/?pagename=wppgphotogallery/gallery41page=2 Details: Description| Value ---|--- Patched:| Yes, at 21.09.2017 Latest check for patch:| 21.09.2017 11:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...