WD Discovery's Use of Weak Hashing Algorithm for Code Signing

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

可逆的单向哈希

Western Digital WD Discovery 加密问题漏洞

Western Digital MyCloud Home是美国西部数据（Western Digital）公司的一款个人存储设备。Western Digital WD Discovery是一款用于Western Digital个人存储设备的远程连接管理工具。 Western Digital WD Discovery 4.4.396版本存在安全漏洞，该漏洞源于使用不安全的 SHA-1 哈希算法进行签名，攻击者利用该漏洞可以利用此弱点创建伪造的证书签名。

N/A

加密问题