PT-2022-11809
CVE-2021-43269
·
تاريخ النشر
2022-01-20
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Code42 app versions prior to 8.8.0
Incydr Basic versions prior to 8.8.0
Incydr Advanced versions prior to 8.8.0
Incydr Gov F1 versions prior to 8.8.0
CrashPlan Cloud versions prior to 8.8.0
CrashPlan for Small Business versions prior to 8.8.0
Description
The issue allows an attacker to change a device's proxy configuration to use a malicious proxy auto-config (PAC) file, leading to arbitrary code execution through eval injection. This affects several Code42 products, excluding Incydr Professional and Enterprise.
Recommendations
For Code42 app version prior to 8.8.0, update to version 8.8.0 or later.
For Incydr Basic version prior to 8.8.0, update to version 8.8.0 or later.
For Incydr Advanced version prior to 8.8.0, update to version 8.8.0 or later.
For Incydr Gov F1 version prior to 8.8.0, update to version 8.8.0 or later.
For CrashPlan Cloud version prior to 8.8.0, update to version 8.8.0 or later.
For CrashPlan for Small Business version prior to 8.8.0, update to version 8.8.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾