CVEvulnerability

CVE-2022-32857

4.3 MEDIUM Published 2022-08-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-319

Description

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.

Affected configurations

• apple ipados (< 15.6) • apple iphone os (< 15.6) • apple mac os x 10.15.7 • apple macos (< 10.15.7) • apple macos (>= 11.0 < 11.6.8) • apple macos (>= 12.0 < 12.5) • apple macos 10.15.7 • apple tvos (< 15.6) • apple watchos (< 8.7)

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References