File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.
References
| Link | Resource |
|---|---|
| https://www.westerndigital.com/support/product-security/wdc-22003-edgerover-desktop-app-version-1-5-0-576 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Oct 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device. |
21 Jan 2022, 02:13
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:westerndigital:edgerover:*:*:*:*:*:macos:*:* cpe:2.3:a:westerndigital:edgerover:*:*:*:*:*:windows:*:* |
|
| CWE | CWE-732 | |
| References | (MISC) https://www.westerndigital.com/support/product-security/wdc-22003-edgerover-desktop-app-version-1-5-0-576 - Vendor Advisory | |
| First Time |
Westerndigital edgerover
Westerndigital |
|
| CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 9.1 |
13 Jan 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-13 21:15
Updated : 2023-12-10 14:09
NVD link : CVE-2022-22988
Mitre link : CVE-2022-22988
CVE.ORG link : CVE-2022-22988
JSON object : View
Products Affected
westerndigital
- edgerover