CVE-2022-36617

2022-09-0915:33:18

mitre

www.cve.org

arq backup

encryption

reversible encryption

cleartext passwords

cve-2022-36617

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

JSON

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.

References

startrekdude.github.io/arqbackup.html

www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html