Insecure Credential Storage Vulnerability in Western Digital My Cloud Remote Backups Application

CVE-2022-29839 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.