CVE-2020-8289

Backblaze for Windows prior to 7.0.1.433 and macOS prior to 7.0.1.434 suffers from improper certificate validation in the bztransmit helper, due to a hardcoded whitelist of strings in URLs that disables SSL checks (e.g., api/clientversion.xml, api/install_backblaze, and certain backblaze domains)...

Exploit for Improper Certificate Validation in Backblaze

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backb...