Merge pull request #474 from cisagov/revert-473-update-code-42

Revert "Update Code42 Crashplan"
pull/475/head^2
justmurphy 2 years ago committed by GitHub
commit 8b0587b5b0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 10
      data/cisagov_C.yml

@ -6438,7 +6438,8 @@ software:
investigated: true
affected_versions: []
fixed_versions:
- 'All'
- '8.8'
- possibly prior versions
unaffected_versions: []
cve-2021-45046:
investigated: false
@ -6452,11 +6453,10 @@ software:
unaffected_versions: []
vendor_links:
- https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates
notes: The CrashPlan app was EOL'd and is now called Code42, so if you detect CrashPlan installed, it is vulnerable.
But you can update easily to Code42 8.8.1 or newer.
notes: I think, they don't specify in the notice, but we know that they released
an updated Crashplan client. Possibly prior versions affected.
references:
- 'https://www.crashplan.com/en-us/business/resources/crashplan-for-small-business-updates-its-desktop-app/'
- 'https://success.code42.com/hc/en-us/articles/4416158712343-RELEASE-NOTIFICATION-Code42-Vulnerability-Mitigation-for-CVE-2021-44228-and-other-updates'
- ''
last_updated: '2021-12-16T00:00:00'
- vendor: CodeBeamer
product: ''

Loading…
Cancel
Save