Vulnerabilities > Haystacksoftware

DATE CVE VULNERABILITY TITLE RISK
2018-01-31 CVE-2017-16945 Incorrect Permission Assignment for Critical Resource vulnerability in Haystacksoftware ARQ
The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path.
local
low complexity
haystacksoftware CWE-732
7.2
2018-01-31 CVE-2017-16928 Incorrect Permission Assignment for Critical Resource vulnerability in Haystacksoftware ARQ
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
local
low complexity
haystacksoftware CWE-732
7.2