Filtered by vendor Backblaze Subscriptions
Filtered by product Backblaze Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8290 1 Backblaze 1 Backblaze 2024-11-21 7.8 High
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.
CVE-2020-8289 1 Backblaze 1 Backblaze 2024-11-21 7.8 High
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality.