CVE-2019-11553

Code42 for Enterprise up to version 6.8.4 is affected by CVE-2019-11553. An administrator who can manage users in an organization, but lacks web restore permission, can impersonate a user who has web restore permission by requesting that user’s token during a web-restore operation. This requires ...

CVE-2019-11553: Improper Privilege Management

In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user coul...