Code42

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local (non-SSO) user via a Code42-…CVE-2020-12736Code42 · 2.0% likely

   CWE-74

2. In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and exec…CVE-2019-15131Code42 · 1.9% likely

   CWE-434

3. In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config (PAC) file, leading to arbitrary code e…CVE-2021-43269Code42 · 1.4% likely

   CWE-94

4. In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web res…CVE-2019-11553Code42 · 0.9% likely

   CWE-269

5. Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-lin…CVE-2019-16861Code42 · 0.4% likely

   CWE-426

6. Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynam…CVE-2019-16860Code42 · 0.4% likely

   CWE-426

7. The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user t…CVE-2018-20131Code42 · 0.3% likely

   CWE-732

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.