CVEs-PoC/2020/CVE-2020-8290.md

CVE-2020-8290

Description

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary.

POC

Reference

• https://github.com/geffner/CVE-2020-8290/blob/master/README.md
• https://youtu.be/OpC6neWd2aM

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/geffner/CVE-2020-8290
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC