Backblaze Client Local Privilege Escalation via Improper Link Resolution

Executive Summary

This vulnerability in the Backblaze Client allows a local user to make the system unbootable by creating a link from Backblaze's folder to critical Windows OS system files during a backup. It occurs due to improper link resolution and requires an administrator-level change that disables specific Windows OS security controls.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking if the Backblaze client version is outdated. On Windows, open Backblaze and go to the 'About...' option in the menu to verify the installed version. Compare it against the latest version mentioned in the release notes (10.0.1.1069). If the version is older, the system may be vulnerable.

Useful 0 Not Useful 0

Impact Analysis

Exploitation could prevent your system from booting, leading to data loss or system unavailability. An attacker with local access could manipulate system files through this vulnerability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized access or data manipulation through filesystem redirection. If exploited, it may lead to unauthorized changes in system files, which could compromise data integrity and confidentiality. Compliance with these regulations often requires ensuring data protection and preventing unauthorized system modifications.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Backblaze client to the latest version (10.0.1.1069 or later) immediately. Download the update from Backblaze's official website or use the automatic update feature. For enterprise deployments, use the Windows MSI installer for mass updates. Ensure automatic updates are enabled to prevent future vulnerabilities.

Useful 0 Not Useful 0