From 4fa06f95b8a80507d6318379479e082960fc0f9e Mon Sep 17 00:00:00 2001 From: justmurphy <96064251+justmurphy@users.noreply.github.com> Date: Fri, 28 Jan 2022 09:27:04 -0500 Subject: [PATCH 1/2] Update Code42 Crashplan --- data/cisagov_C.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/data/cisagov_C.yml b/data/cisagov_C.yml index b24be77..5a1d92b 100644 --- a/data/cisagov_C.yml +++ b/data/cisagov_C.yml @@ -6438,8 +6438,7 @@ software: investigated: true affected_versions: [] fixed_versions: - - '8.8' - - possibly prior versions + - 'All' unaffected_versions: [] cve-2021-45046: investigated: false @@ -6453,10 +6452,11 @@ software: unaffected_versions: [] vendor_links: - https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates - notes: I think, they don't specify in the notice, but we know that they released - an updated Crashplan client. Possibly prior versions affected. + notes: The CrashPlan app was EOL'd and is now called Code42, so if you detect CrashPlan installed, it is vulnerable. + But you can update easily to Code42 8.8.1 or newer. references: - - '' + - 'https://www.crashplan.com/en-us/business/resources/crashplan-for-small-business-updates-its-desktop-app/' + - 'https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates' last_updated: '2021-12-16T00:00:00' - vendor: CodeBeamer product: '' From 79326833425fa8302ffb40a17f5e5d5797050eab Mon Sep 17 00:00:00 2001 From: justmurphy <96064251+justmurphy@users.noreply.github.com> Date: Fri, 28 Jan 2022 09:32:18 -0500 Subject: [PATCH 2/2] Fix notes linting error, Code42 Crashplan --- data/cisagov_C.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/cisagov_C.yml b/data/cisagov_C.yml index 5a1d92b..7e3c8ba 100644 --- a/data/cisagov_C.yml +++ b/data/cisagov_C.yml @@ -6453,7 +6453,7 @@ software: vendor_links: - https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates notes: The CrashPlan app was EOL'd and is now called Code42, so if you detect CrashPlan installed, it is vulnerable. - But you can update easily to Code42 8.8.1 or newer. + But you can update easily to Code42 8.8.1 or newer. references: - 'https://www.crashplan.com/en-us/business/resources/crashplan-for-small-business-updates-its-desktop-app/' - 'https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates'