Lucene search

HackeroneCVE-2020-8289

HistoryDec 27, 2020 - 2:15 a.m.

CVE-2020-8289

2020-12-2702:15:14

CWE-295

hackerone

web.nvd.nist.gov

482

backblaze

windows

macos

certificate validation

remote code execution

cve-2020-8289

security

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.012

Percentile

85.6%

JSON

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in bztransmit helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality.

Affected configurations

Nvd

Node

backblazebackblazeRange<7.0.1.433windows

backblazebackblazeRange<7.0.1.434macos

VendorProductVersionCPE
backblazebackblaze*cpe:2.3:a:backblaze:backblaze:*:*:*:*:*:windows:*:*
backblazebackblaze*cpe:2.3:a:backblaze:backblaze:*:*:*:*:*:macos:*:*

Vendor	Product	Version	CPE
backblaze	backblaze	*	cpe:2.3:a:backblaze:backblaze::::::windows::*
backblaze	backblaze	*	cpe:2.3:a:backblaze:backblaze::::::macos::*

CNA Affected

[
  {
    "product": "Backblaze",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2020/Dec/57

seclists.org/fulldisclosure/2020/Dec/58

github.com/geffner/CVE-2020-8289/blob/master/README.md

hackerone.com/reports/818853

www.backblaze.com/blog/backblaze-cloud-backup-release-7-0-1/

youtu.be/W0THXbcX5V8

Social References

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.012

Percentile

85.6%

JSON

Related for CVE-2020-8289