10 matches found
CVE-2020-8289
CVE-2020-8289 – Backblaze를 통한 SYSTEM/root 원격 코드 실행 요약 이름: Backblaze를 통한 SYSTEM/root 원격 코드 실행 CVE: CVE-2020-8289 발견자: Jason Geffner 공급업체: Backblaze 제품: Windows용 Backblaze 및 macOS용 Backblaze 위험도: 치명적 발견 날짜: 2020-03-13 공개 날짜: 2020-09-09 수정 버전: 7.0.1.433 Windows 및 7.1.0.434 macOS 소개 Wikipedia에 따르면...
CVE-2020-8290
CVE-2020-8290 – Backblaze 권한 상승 요약 이름: Backblaze 권한 상승 CVE: CVE-2020-8290 발견자: Jason Geffner 공급업체: Backblaze 제품: Backblaze for Windows 및 Backblaze for macOS 위험도: 높음 발견일: 2020-03-13 공개일: 2020-09-09 수정 버전: 7.0.0.439 소개 위키피디아에 따르면, Backblaze는 "Windows 및 macOS 사용자가 데이터를 오프사이트 데이터 센터에 백업할 수 있는 온라인 백업...
Backblaze Trust Management Issues Vulnerabilities
Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8289
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8289
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality...
Backblaze 信任管理问题漏洞
Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...
