Every CVESearch/Get API key

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...

7.2 HighFix available

CVE-2007-2766 is a high vulnerability (CVSS 7.2) in Backup Manager Manager, published May 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 27th percentile. Fixed in backup-manager 0.7.6-1.

What does this mean?
Severity
7.2 HighCVSS 2.0, NVD
Exploit chance
0.33%EPSS, 27th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.7.6-1backup-manager +2 more

Description

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Exploit likelihood

0.33%Down 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
backup-manager
Debian:12
before 0.7.6-1
0.7.6-1
backup-manager
Debian:13
before 0.7.6-1
0.7.6-1
backup-manager
Debian:14
before 0.7.6-1
0.7.6-1

What each source reports

NVD Score used7.2

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
CVE-2007-2766
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
CVE-2007-2766
Updated
2026-11-02
EUVDEUVD-2007-2758No score

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
EUVD-2007-2758
Updated
2026-11-03
GitHub AdvisoriesGHSA-w99m-9m8w-9wj5No score

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
GHSA-w99m-9m8w-9wj5
Updated
2026-11-02
OSVNo score

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
CVE-2007-2766
Updated
2026-11-02
OSVDEBIAN-CVE-2007-2766No score

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Record
DEBIAN-CVE-2007-2766
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open