CVE-2022-29835

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.

• CWE-328
• CWE-326

• https://www.westerndigital.com/support/product-security/wdc-22014-wd-discovery-desktop-app-version-4-4-396Vendor Advisory
• https://www.westerndigital.com/support/product-security/wdc-22014-wd-discovery-desktop-app-version-4-4-396Vendor Advisory

Published

Sep 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2983The Salat Times WordPress plugin before 3.2.2 does not sanit…4.8
• CVE-2022-29830Use of Hard-coded Cryptographic Key vulnerability in Mitsubi…9.1
• CVE-2022-29831Use of Hard-coded Password vulnerability in Mitsubishi Elect…7.5
• CVE-2022-29832Cleartext Storage of Sensitive Information in Memory vulnera…6.5
• CVE-2022-29833Insufficiently Protected Credentials vulnerability in Mitsub…6.5
• CVE-2022-29834Improper Limitation of a Pathname to a Restricted Directory …7.5
• CVE-2022-29836Improper Limitation of a Pathname to a Restricted Directory …4.3
• CVE-2022-29837A path traversal vulnerability was addressed in Western Digi…7.8
• CVE-2022-29838Improper Authentication vulnerability in the encrypted volum…4.6
• CVE-2022-29839Insufficiently Protected Credentials vulnerability in the re…5.5
• CVE-2022-2984In jpg driver, there is a possible out of bounds write due t…5.5
• CVE-2022-29840Server-Side Request Forgery (SSRF) vulnerability that could …5.5