CVE-2022-32857

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213340	Vendor Advisory
https://support.apple.com/en-us/HT213342	Vendor Advisory
https://support.apple.com/en-us/HT213343	Vendor Advisory
https://support.apple.com/en-us/HT213344	Vendor Advisory
https://support.apple.com/en-us/HT213345	Vendor Advisory
https://support.apple.com/en-us/HT213346	Vendor Advisory
https://support.apple.com/en-us/HT213340	Vendor Advisory
https://support.apple.com/en-us/HT213342	Vendor Advisory
https://support.apple.com/en-us/HT213343	Vendor Advisory
https://support.apple.com/en-us/HT213344	Vendor Advisory
https://support.apple.com/en-us/HT213345	Vendor Advisory
https://support.apple.com/en-us/HT213346	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos:10.15.7:-::::::
	cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:watchos::::::::

History

21 Nov 2024, 07:07

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT213340 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213340 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213342 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213342 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213343 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213343 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213344 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213344 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213345 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213345 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213346 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213346 - Vendor Advisory

02 Nov 2022, 13:18

Type	Values Removed	Values Added
CPE	cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001::::::	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004::::::

31 Aug 2022, 15:05

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.3
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004:::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:watchos:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:::::: cpe:2.3:o:apple:macos:10.15.7:-:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:iphone_os::::::::
References	~~(MISC) https://support.apple.com/en-us/HT213344 -~~	(MISC) https://support.apple.com/en-us/HT213344 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213340 -~~	(MISC) https://support.apple.com/en-us/HT213340 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213345 -~~	(MISC) https://support.apple.com/en-us/HT213345 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213342 -~~	(MISC) https://support.apple.com/en-us/HT213342 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213343 -~~	(MISC) https://support.apple.com/en-us/HT213343 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213346 -~~	(MISC) https://support.apple.com/en-us/HT213346 - Vendor Advisory

24 Aug 2022, 20:30

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-08-24 20:15

Updated : 2024-11-21 07:07

NVD link : CVE-2022-32857

Mitre link : CVE-2022-32857

CVE.ORG link : CVE-2022-32857

JSON object : View

Products Affected

apple

iphone_os
watchos
mac_os_x
tvos
macos
ipados

CWE

NVD-CWE-noinfo

4.3 /10