medium4.9
CVE-2022-36617
Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption.
Impact
Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haystacksoftware | Arq Backup | through 7.19.5.0 |