Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an malicious user to replace the public key to decrypt them later on.
<!--X-Body-Begin-->
<!--X-User-Header-->
Full Disclosure
mailing list archives
<!--X-User-Header-End-->
<!--X-TopPNI-->
By Date
By Thread
</form>
<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
Re: [FD] CVE-2020-8152 – Elevation of Privilege in Backblaze
<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->
...
CVE-2020-8290 – Elevation of Privilege in Backblaze
CVE-2020-8290 – Elevation of Privilege in Backblaze
Summary
Name: Elevation of Privilege in Backblaze
CVE: CVE-2020-8290
Discoverer: Jason Geffner
Vendor: Backblaze
Product: Backblaze for Windows and Backblaze for macOS
Risk: High
Discovery Date: 2020-03-13
Publication Data: 2020-09-09
Fixed Version: 700439
Introduction
Per Wikipedia, Backblaze is
"an online back
CVE-2020-8290 – Elevation of Privilege in Backblaze
CVE-2020-8290 – Elevation of Privilege in Backblaze
Summary
Name: Elevation of Privilege in Backblaze
CVE: CVE-2020-8290
Discoverer: Jason Geffner
Vendor: Backblaze
Product: Backblaze for Windows and Backblaze for macOS
Risk: High
Discovery Date: 2020-03-13
Publication Data: 2020-09-09
Fixed Version: 700439
Introduction
Per Wikipedia, Backblaze is
"an online back
Vulmon