Privilege Escalation and Sensitive File Disclosure Vulnerability in Code42 App

Privilege Escalation and Sensitive File Disclosure Vulnerability in Code42 App

CVE-2018-20131 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would not have access to.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.