CVE-2018-20131

CVE-2018-20131 affects the Code42 app for Enterprise on Linux prior to version 6.8.4. The issue is caused by overly permissive permissions on the /usr/local/crashplan/log directory, allowing an unprivileged user to manipulate symbolic links to escalate privileges or read sensitive files. The vuln...