CVE-2022-32857

medium

Description

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.

References

https://support.apple.com/en-us/HT213346

https://support.apple.com/en-us/HT213345

https://support.apple.com/en-us/HT213344

https://support.apple.com/en-us/HT213343

https://support.apple.com/en-us/HT213342

https://support.apple.com/en-us/HT213340

Details

Source: Mitre, NVD

Published: 2022-08-24

Updated: 2022-11-02

Risk Information

CVSS v2

Base Score: 3.3

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium