CVE-2022-32857

Severity Score

4.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.

Se abordó este problema usando HTTPS cuando es enviada información a través de la red. Este problema es corregido en macOS Monterey versión 12.5, macOS Big Sur versión 11.6.8, Security Update 2022-005 Catalina, iOS versión 15.6 y iPadOS versión 15.6, tvOS versión 15.6, watchOS versión 8.7. Un usuario en una posición de red privilegiada puede rastrear la actividad de un usuario.

*Credits: N/A

CVSS Scores

NISTv3.1 4.3

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-06-09 CVE Reserved
2022-08-24 CVE Published
2024-02-04 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://support.apple.com/en-us/HT213340	2022-11-02
https://support.apple.com/en-us/HT213342	2022-11-02
https://support.apple.com/en-us/HT213343	2022-11-02
https://support.apple.com/en-us/HT213344	2022-11-02
https://support.apple.com/en-us/HT213345	2022-11-02
https://support.apple.com/en-us/HT213346	2022-11-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apple Search vendor "Apple"		Ipados Search vendor "Apple" for product "Ipados"				< 15.6 Search vendor "Apple" for product "Ipados" and version " < 15.6"		-		Affected
Apple Search vendor "Apple"		Iphone Os Search vendor "Apple" for product "Iphone Os"				< 15.6 Search vendor "Apple" for product "Iphone Os" and version " < 15.6"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2020-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-002		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-003		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-004		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-005		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-006		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-007		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-008		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-002		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-003		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				< 10.15.7 Search vendor "Apple" for product "Macos" and version " < 10.15.7"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				>= 11.0 < 11.6.8 Search vendor "Apple" for product "Macos" and version " >= 11.0 < 11.6.8"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				>= 12.0 < 12.5 Search vendor "Apple" for product "Macos" and version " >= 12.0 < 12.5"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				10.15.7 Search vendor "Apple" for product "Macos" and version "10.15.7"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				10.15.7 Search vendor "Apple" for product "Macos" and version "10.15.7"		security_update_2022-004		Affected
Apple Search vendor "Apple"		Tvos Search vendor "Apple" for product "Tvos"				< 15.6 Search vendor "Apple" for product "Tvos" and version " < 15.6"		-		Affected
Apple Search vendor "Apple"		Watchos Search vendor "Apple" for product "Watchos"				< 8.7 Search vendor "Apple" for product "Watchos" and version " < 8.7"		-		Affected