Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-29835

WD Discovery's Use of Weak Hashing Algorithm for Code Signing

Description

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Western Digital WD Discovery

  • WD Discovery Desktop App to < 4.4.396affected

Western Digital WD Discovery

  • WD Discovery Desktop App to < 4.4.396affected

References