CVE-2019-11553

Code42 for Enterprise up to version 6.8.4 is affected by CVE-2019-11553. An administrator who can manage users in an organization, but lacks web restore permission, can impersonate a user who has web restore permission by requesting that user’s token during a web-restore operation. This requires ...

PT-2019-12376

Name of the Vulnerable Software and Affected Versions Code42 for Enterprise versions through 6.8.4 Description The issue allows an administrator without web restore permission but with user management capabilities to impersonate a user who has web restore permission. This can be achieved by...

CVE-2019-11553: Improper Privilege Management

In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user coul...

PT-2019-9999

Name of the Vulnerable Software and Affected Versions Code42 for Enterprise versions prior to 6.8.4 Description The issue allows a user to manipulate symbolic links to escalate privileges or access sensitive files due to overly permissive permissions on the /usr/local/crashplan/log directory...