Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2020-12-27T01:22:39
Updated: 2024-08-04T09:56:28.299Z
Reserved: 2020-01-28T00:00:00
Link: CVE-2020-8290
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-12-27T02:15:14.573
Modified: 2020-12-31T19:25:22.013
Link: CVE-2020-8290
Redhat
No data.