CVE-2022-32857

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a users activity.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
appleCNA
---
---
CVEADP
---
---
CISA-ADPADP
4.3 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
VendorProductVersion
appleipados
𝑥
< 15.6
appleiphone_os
𝑥
< 15.6
applemac_os_x
10.15.7:security_update_2020-001
applemac_os_x
10.15.7:security_update_2021-001
applemac_os_x
10.15.7:security_update_2021-002
applemac_os_x
10.15.7:security_update_2021-003
applemac_os_x
10.15.7:security_update_2021-004
applemac_os_x
10.15.7:security_update_2021-005
applemac_os_x
10.15.7:security_update_2021-006
applemac_os_x
10.15.7:security_update_2021-007
applemac_os_x
10.15.7:security_update_2021-008
applemac_os_x
10.15.7:security_update_2022-001
applemac_os_x
10.15.7:security_update_2022-002
applemac_os_x
10.15.7:security_update_2022-003
applemacos
𝑥
< 10.15.7
applemacos
11.0 ≤
𝑥
< 11.6.8
applemacos
12.0 ≤
𝑥
< 12.5
applemacos
10.15.7
applemacos
10.15.7:security_update_2022-004
appletvos
𝑥
< 15.6
applewatchos
𝑥
< 8.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213342
https://support.apple.com/en-us/HT213343
https://support.apple.com/en-us/HT213344
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213342
https://support.apple.com/en-us/HT213343
https://support.apple.com/en-us/HT213344
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346