CVE-2020-8290: High severity backblaze vulnerability
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8290?
CVE-2020-8290 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2020-8290?
To fix CVE-2020-8290, upgrade Backblaze to version 7.0.0.439 or later for both Windows and macOS.
What systems are affected by CVE-2020-8290?
CVE-2020-8290 affects Backblaze for Windows and macOS versions prior to 7.0.0.439.
What is the nature of the vulnerability in CVE-2020-8290?
CVE-2020-8290 involves improper privilege management in the `bztransmit` helper due to insufficient permission handling before directory creation.
Can CVE-2020-8290 be exploited remotely?
No, CVE-2020-8290 requires local access to exploit the privilege escalation vulnerability.