4 matches found
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8290
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...
CVE-2020-8290
CVE-2020-8290 affects Backblaze for Windows and macOS prior to version 7.0.0.439. The root cause is improper privilege management in the bztransmit helper, specifically lack of permission handling and validation when creating the client update directory (bzupdates). This enables a local unprivile...
