CVE-2020-8289: Critical severity backblaze vulnerability
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8289?
CVE-2020-8289 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2020-8289?
Fix CVE-2020-8289 by updating Backblaze for Windows to version 7.0.1.433 or later and Backblaze for macOS to version 7.0.1.434 or later.
What causes CVE-2020-8289?
CVE-2020-8289 is caused by improper certificate validation in the `bztransmit` helper due to a hardcoded whitelist of strings in URLs.
What are the potential impacts of CVE-2020-8289?
The potential impacts of CVE-2020-8289 include unauthorized remote code execution on affected systems.
Is CVE-2020-8289 specific to certain operating systems?
Yes, CVE-2020-8289 specifically affects Backblaze on Windows and macOS prior to the specified versions.