Back to Database
Status published
Medium
CVE-2019-11551
In Code42 Enterprise and Crashplan for Small Business through Client...
Vulnerability Description
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-11551
Credits & Attribution
No credits recorded in the NVD database.
References
More from code42
View All →CVE-2021-43269
In Code42 app before 8.8.0, eval injection allows an attacker...
High
8.8
CVE-2020-12736
Code42 environments with on-premises server versions 7.0.4 and earlier allow...
High
7.2
CVE-2019-16861
Code42 server through 7.0.2 for Windows has an Untrusted Search...
High
7.3
CVE-2019-16860
Code42 app through version 7.0.2 for Windows has an Untrusted...
High
7.3
CVE-2019-15131
In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and...
Critical
9.8
Affected Vendor
code42
View all reports →Affected Software
code42 for enterprise, crashplan for small business
Vulnerable Versions:
0
Timeline
Official Publish:
August 21st, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.