CVE-2020-8290

CVE-2020-8290 affects Backblaze for Windows and macOS prior to version 7.0.0.439. The root cause is improper privilege management in the bztransmit helper, specifically lack of permission handling and validation when creating the client update directory (bzupdates). This enables a local unprivile...

CVE-2020-8290

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...

Exploit for Improper Privilege Management in Backblaze

CVE-2020-8290 – Elevation of Privilege in Backblaze Summar...