PoC Index85,101 CVEs with PoCs

CVE-2020-8290

HIGH 7.8EPSS 0.6%

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.

Affected
Backblaze
CVSS v3.1 NVD
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD
4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.59% chance of exploitation in the next 30 days, 47th percentile
Published
2020-12-27
Updated
2024-08-04

Proof-of-concept exploits (2)

Security advisories

References

Related