Read the docs

Backblaze

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Backblaze records in CISA KEV

No Backblaze vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backblaze 2 records MEDIUM B2 Command Line Tool 1 record LOW B2 Python Software Development Kit 1 record LOW

Records

2 records in Backblaze · all components

TI-2020-06706 CVE-2020-8289 · GHSA-7f55-fqw6-8jjp

Improper certificate validation in Backblaze

Priority MEDIUM 42

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where validation is disable…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04696 Published 2020-12-27 No fix listed CWE-295
TI-2020-06707 CVE-2020-8290 · GHSA-mfc8-4qmg-g3x6

Improper privilege management in Backblaze

Priority LOW 35

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directori…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00589 Published 2020-12-27 Fixed in 7.0.0.439 CWE-269
Open these records in search →