CVE-2020-8289CWE-295

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to…

published December 27, 2020

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where validation is disabled leading to possible remote code execution via client update functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04658 · 91.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2020-12-27T01:20Z
EPSS history
Timeline
  • 27 DEC 01:20Z
    Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to…
    cvelistv5