diff --git a/data/cisagov_C.yml b/data/cisagov_C.yml index b24be77..7e3c8ba 100644 --- a/data/cisagov_C.yml +++ b/data/cisagov_C.yml @@ -6438,8 +6438,7 @@ software: investigated: true affected_versions: [] fixed_versions: - - '8.8' - - possibly prior versions + - 'All' unaffected_versions: [] cve-2021-45046: investigated: false @@ -6453,10 +6452,11 @@ software: unaffected_versions: [] vendor_links: - https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates - notes: I think, they don't specify in the notice, but we know that they released - an updated Crashplan client. Possibly prior versions affected. + notes: The CrashPlan app was EOL'd and is now called Code42, so if you detect CrashPlan installed, it is vulnerable. + But you can update easily to Code42 8.8.1 or newer. references: - - '' + - 'https://www.crashplan.com/en-us/business/resources/crashplan-for-small-business-updates-its-desktop-app/' + - 'https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates' last_updated: '2021-12-16T00:00:00' - vendor: CodeBeamer product: ''