CVE-2020-8290 - AskarLabs CVE Database

CVE-2020-8290

Vendor N/A

Product Backblaze

Weakness CWE-269

Published December 27, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.

Key dates

02Disclosure timeline

December 27, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8290 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

04Related CVE

CVE-2023-40685 IBM i privilege escalation CVE-2022-29179 Improper Privilege Management in Cilium CVE-2003-5001 ISS BlackICE PC Protection Cross Site Scripting Detection privileges management CVE-2017-20069 Hindu Matrimonial Script countrymanagement.php privileges management CVE-2025-47713 Apache CloudStack: Domain Admin can reset Admin password in Root Domain