Looking for the right IT Management solution for your business? Buyers are primarily concerned about the real total cost of implementation (TCO), the full list of features, vendor reliability, user reviews, and the pros and cons. There is a clear winner in this case and it is Crashplan! Crashplan offers users more features (7) than Code42 (0). CoConstructīottom Line: Which is Better - Crashplan or Code42?Ĭode42 is more expensive to implement (TCO) than Crashplan, and Crashplan is rated higher (89/100) than Code42 (62/100). Upgrading to version 6.7.5, 6.8.8 or 6.9.4 eliminates this vulnerability. MITRE ATT&CK project uses the attack technique T1608.002 for this issue. Neither technical details nor an exploit are publicly available. The exploitation doesn't need any form of authentication. This vulnerability is known as CVE-2019-11552 since. A proxy auto-configuration file, crafted by a lesser privileged user, may be used to execute arbitrary code at a higher privilege as the service user. The summary by CVE is:Ĭode42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection. As an impact it is known to affect confidentiality, integrity, and availability. The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. The CWE definition for the vulnerability is CWE-434. The manipulation with an unknown input leads to a unrestricted upload vulnerability. Affected by this vulnerability is some unknown processing of the component Configuration File Handler. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability has been found in Code42 Enterprise and Crashplan for Small Business Client up to 6.7.4/6.8.7/6.9.4 and classified as critical.

The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Code42 enterprise pricing