Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2022-22988

Insecure file and directory permissions on EdgeRover

Description

File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital EdgeRover

Default version status: unaffected

  • EdgeRover Mac Desktop App to < 1.5.0-576affected

Western Digital EdgeRover

Default version status: unaffected

  • EdgeRover Windows Desktop App to < 1.5.0-576affected

References