CVE-2019-11552

Code42 Enterprise and CrashPlan for Small Business Client versions 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 are affected by an eval injection vulnerability. A proxy auto-configuration (PAC) file, crafted by a user with lower privileges, may be used to execute arbitrary code with t...

CVE-2019-11551

CVE-2019-11551 — Code42 Enterprise / CrashPlan for Small Business (Client ≤ 6.9.1) : An attacker with local access can craft a restore request via the Code42 app to write a file to a location they should not be able to write. Root cause: insufficient validation of the restore target path in the c...