CVE-2022-22988

File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.

• CWE-275
• CWE-732

• https://www.westerndigital.com/support/product-security/wdc-22003-edgerover-desktop-app-version-1-5-0-576Vendor Advisory
• https://www.westerndigital.com/support/product-security/wdc-22003-edgerover-desktop-app-version-1-5-0-576Vendor Advisory

Published

Jan 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22982The vCenter Server contains a server-side request forgery (S…7.5
• CVE-2022-22983VMware Workstation (16.x prior to 16.2.4) contains an unprot…5.9
• CVE-2022-22984The package snyk before 1.1064.0; the package snyk-mvn-plugi…6.3
• CVE-2022-22985The absence of filters when loading some sections in the web…8.8
• CVE-2022-22986Netcommunity OG410X and OG810X series (Netcommunity OG410Xa,…8.8
• CVE-2022-22987The affected product has a hardcoded private key available i…9.8
• CVE-2022-22989My Cloud OS 5 was vulnerable to a pre-authenticated stack ov…9.8
• CVE-2022-2299The Allow SVG Files WordPress plugin through 1.1 does not sa…5.4
• CVE-2022-22990A limited authentication bypass vulnerability was discovered…8.8
• CVE-2022-22991A malicious user on the same LAN could use DNS spoofing foll…8.8
• CVE-2022-22992A command injection remote code execution vulnerability was …9.8
• CVE-2022-22993A limited SSRF vulnerability was discovered on Western Digit…8.8