CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Permissions Privileges and Access Controls
Summary: in code42 enterprise and crashplan for small business through client version 6.9.1, an attacker can craft a restore request to restore a file through the code42 app to a location they do not have privileges to write.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-08-21
Last Modified Date: 2019-09-18