{"id":45812,"date":"2022-03-21T15:30:13","date_gmt":"2022-03-21T15:30:13","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/western-digital-tells-edgerover-users-to-patch-app-again\/"},"modified":"2022-03-21T15:30:13","modified_gmt":"2022-03-21T15:30:13","slug":"western-digital-tells-edgerover-users-to-patch-app-again","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/western-digital-tells-edgerover-users-to-patch-app-again\/","title":{"rendered":"Western Digital tells EdgeRover users to patch app again"},"content":{"rendered":"

Users of Western Digital’s EdgeRover app<\/a> for Windows and Mac are advised to download an updated version to avoid a security flaw that might allow an attacker unauthorized access to directories and files.<\/p>\n

The flaw, which was given the CVE identification number CVE-2022-22988<\/a>, carries a Common Vulnerability Scoring System (CVSS) severity rating of 9.1, making it a critical weakness. It has now been addressed, however, with a modification to the way EdgeRover handles file and directory permissions.<\/p>\n

According to Western Digital, the flaw meant that EdgeRover was subject to a directory traversal vulnerability, which may have allowed an attacker to carry out a local privilege escalation and bypass file system sandboxing. If successfully exploited, this could lead to the disclosure of sensitive information or even a potential denial-of-service attack, the firm said.<\/p>\n