CVE-2022-36617

—

CVSS 3.1

4.9 medium

EPSS

<1%p42

Published

Sep 9, 2022 (Sep 9, 2022)

Modified

Jun 17, 2026

Description

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.

Vendors: haystacksoftware
Products: arq backup
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.