CVE-2022-29839CWE-522

Remote Backups Application Discloses Stored Credentials

Medium · published December 9, 2022

CVSS v3.1
4.1
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-12-09T00:00Z
EPSS history
Timeline
  • 09 DEC 00:00Z
    Remote Backups Application Discloses Stored Credentials
    cvelistv5