PT-2020-20080 · Backblaze · Backblaze For Macos+1

Jason Geffner · Published 2020-12-27 · Updated 2020-12-31 · CVE-2020-8289

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Backblaze for Windows versions prior to 7.0.1.433 Backblaze for macOS versions prior to 7.0.1.434

Description The issue arises from improper certificate validation in the bztransmit helper, caused by a hardcoded whitelist of strings in URLs where validation is disabled. This could lead to possible remote code execution via client update functionality.

Recommendations For Backblaze for Windows versions prior to 7.0.1.433, update to version 7.0.1.433 or later. For Backblaze for macOS versions prior to 7.0.1.434, update to version 7.0.1.434 or later. As a temporary workaround, consider disabling the bztransmit helper until a patch is available.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-8289

Affected Products

Backblaze For Windows

Backblaze For Macos

References · 12

• 🔥 https://github.com/geffner/CVE-2020-8289 · Exploit
• 🔥 https://github.com/geffner/CVE-2020-8289/blob/master/README.md · Exploit
• 🔥 https://youtu.be/W0THXbcX5V8 · Exploit
• https://osv.dev/vulnerability/CVE-2020-8289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8289 · Security Note
• https://t.me/cvenotify/7773 · Telegram Post
• https://t.me/cvenotify/8037 · Telegram Post
• https://backblaze.com/blog/backblaze-cloud-backup-release-7-0-1 · Note
• https://hackerone.com/reports/818853 · Note
• https://t.me/cvenotify/7861 · Telegram Post
• http://seclists.org/fulldisclosure/2020/Dec/58 · Note
• http://seclists.org/fulldisclosure/2020/Dec/57 · Note