WD is happy to announce the release of My Cloud Firmware 2.31.183 for manual download and limited auto-update (phased rollout) on 05/20 at https://support.wdc.com for the following My Cloud products.
- My Cloud
- My Cloud Mirror Gen2
- My Cloud EX2 Ultra
- My Cloud EX2100
- My Cloud EX4100
- My Cloud DL2100
- My Cloud DL4100
- My Cloud PR2100
- My Cloud PR4100
What’s new!
Security Fixes
- Apache updated to version 2.4.38 (CVE-2019-0211).
- Webfile viewer disabled for non-admin users (CVE-2019-9949).
- Removed remember-me mechanism from login page.
- Resolved authenticated arbitrary file operation and authenticated command injection vulnerabilities.
- Added protection against file path traversal.
- Resolved authentication bypass vulnerability.
- Mitigation added for user session hijacking.
- Added protection against cookie modification vulnerabilities.
Other Bug Fixes
- Resolved storage key upload error
Notable KBA:
