[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw785NtVB9pwIVTiGi0EIuNvklu_mspuoXsABpIdSGDU":3,"g5a-risk:CVE-2022-22990":185},{"success":4,"data":5,"meta":183},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":88,"references":89,"referencesCount":104,"weaknesses":105,"weaknessesCount":121,"isActivelyExploited":122,"cisaInfo":26,"otxData":26,"relatedBlogPosts":123,"seoMetadata":124,"configurations":149,"relatedVendorCves":181,"notableEvents":182},"CVE-2022-22990","What is CVE-2022-22990?","A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rewriting rule logic on PHP scripts.","A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My ...","2022-01-13T21:15:08.917","2023-07-11T19:56:29.41",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":39,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"psirt@wdc.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":35,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N","LOCAL","CHANGED",7.8,1.4,5.8,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":25,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",8.3,6.5,10,0.02124,[48,48,48,48,48,48,48],"High",[52,57,61,64,67,70,73,76,79,82,85],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"westerndigital","my_cloud_os","*","cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":59,"criteria":60,"vulnerable":4},"my_cloud","-","cpe:2.3:h:westerndigital:my_cloud:-:*:*:*:*:*:*:*",{"vendor":53,"product":62,"version":59,"criteria":63,"vulnerable":4},"my_cloud_dl2100","cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*",{"vendor":53,"product":65,"version":59,"criteria":66,"vulnerable":4},"my_cloud_dl4100","cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*",{"vendor":53,"product":68,"version":59,"criteria":69,"vulnerable":4},"my_cloud_ex2_ultra","cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*",{"vendor":53,"product":71,"version":59,"criteria":72,"vulnerable":4},"my_cloud_ex2100","cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*",{"vendor":53,"product":74,"version":59,"criteria":75,"vulnerable":4},"my_cloud_ex4100","cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*",{"vendor":53,"product":77,"version":59,"criteria":78,"vulnerable":4},"my_cloud_mirror_gen_2","cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:*",{"vendor":53,"product":80,"version":59,"criteria":81,"vulnerable":4},"my_cloud_pr2100","cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*",{"vendor":53,"product":83,"version":59,"criteria":84,"vulnerable":4},"my_cloud_pr4100","cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*",{"vendor":53,"product":86,"version":59,"criteria":87,"vulnerable":4},"wd_cloud","cpe:2.3:h:westerndigital:wd_cloud:-:*:*:*:*:*:*:*",11,[90,95,101],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fwww.westerndigital.com\u002Fsupport\u002Fproduct-security\u002Fwdc-22002-my-cloud-os5-firmware-5-19-117","Westerndigital",[94],"Vendor Advisory",{"url":96,"source":97,"tags":98},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-22-076\u002F","Zerodayinitiative",[99,100],"Third Party Advisory","VDB Entry",{"url":102,"source":97,"tags":103},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-22-347\u002F",[99,100],3,[106,114],{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":112,"structure":113},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":113},"CWE-697","Incorrect Comparison","The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.","This Pillar covers several possibilities:","Incomplete","Pillar",2,false,[],{"title":125,"metaDescription":126,"keywords":127,"canonicalUrl":128,"structuredData":129},"What is CVE-2022-22990? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22990, a high severity cyber security vulnerability from 2022. A limited authentication bypass vulnerability was discovere...","CVE-2022-22990, CVE-2022-22990 vulnerability, CVE-2022-22990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, westerndigital security, my_cloud_os vulnerability, my_cloud vulnerability, my_cloud_dl2100 vulnerability, my_cloud_dl4100 vulnerability, my_cloud_ex2_ultra vulnerability","\u002Fwhat-is\u002Fcve-2022-22990",{"@context":130,"@type":131,"headline":125,"description":126,"datePublished":10,"dateModified":11,"author":132,"publisher":136,"about":140,"mainEntityOfPage":144,"articleSection":147,"keywords":148},"https:\u002F\u002Fschema.org","TechArticle",{"@type":133,"name":134,"url":135},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":133,"name":134,"url":135,"logo":137},{"@type":138,"url":139},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":141,"name":6,"description":142,"additionalType":143},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":145,"@id":146},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22990","Cybersecurity","CVE-2022-22990, CVE-2022-22990 vulnerability, CVE-2022-22990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[150],{"Operator":151,"Negate":26,"Nodes":152},"AND",[153,159],{"Operator":154,"Negate":26,"CPEMatch":155},"OR",[156],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":158,"VersionEndIncluding":26},"9B585AE9-1F28-42D7-B16D-75BF1CB8A054","5.19.117",{"Operator":154,"Negate":26,"CPEMatch":160},[161,163,165,167,169,171,173,175,177,179],{"Vulnerable":26,"Criteria":60,"MatchCriteriaID":162,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3A9EE86B-05EE-4F2E-A912-624DDCF9C41B",{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9E783EBC-7608-4527-B1AD-9B4E7A7A108C",{"Vulnerable":26,"Criteria":66,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F3034F4A-239C-4E38-9BD6-217361A7C519",{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5A581EBA-A1F2-4ABC-8183-29973A46FA43",{"Vulnerable":26,"Criteria":72,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"ABBBDC1E-2320-4767-B669-1BB2FFB1E1C4",{"Vulnerable":26,"Criteria":75,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B78030F0-6655-4604-9D16-2FA1F3FD52FF",{"Vulnerable":26,"Criteria":78,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5695E842-1561-4A4F-901F-6EC07F558989",{"Vulnerable":26,"Criteria":81,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BF58260B-2131-402C-A9DA-67B188136DE1",{"Vulnerable":26,"Criteria":84,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB0C2FD9-4792-4DA2-9698-E53109A499EC",{"Vulnerable":26,"Criteria":87,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8FDE0337-4329-4CE3-9B0B-61BE8361E910",[],[],{"lastModified":11,"cacheTime":184,"version":42},1792266682636,{"score":186,"band":187,"action":188,"scoredAt":189},47,"Medium","Plan remediation","2026-10-16T06:52:56.493114+00:00"]