CVE-2018-20131 The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic...
HighCVSS 7.8
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would not have access to.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| code42 | < 6.8.4 | 6.8.4 |
References
- 106452 third-party-advisory vdb-entry
- code42.com