CVE-2007-5626

CVE-2007-5626 describes a vulnerability in Bacula 2.2.5 and earlier versions, where the make_catalog_backup function exposes MySQL passwords. This occurs by transmitting the password as a command-line argument, which can be intercepted by listing processes or sniffing network traffic, and sometimes through cleartext email. Rated as Medium severity (CVSS 5.5), this vulnerability has a local attack vector with low complexity, allowing an attacker with local access to achieve high confidentiality impact by obtaining sensitive credentials. There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and exploitation interest.