CVE-2022-32857

    Dashboard / Vulnerabilities / CVE-2022-32857

    CVE-2022-32857

    Published: 24 Aug 2022Last Modified: 14 Feb 2026

    Summary:

    Details: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.

    References: https://support.apple.com/en-us/HT213340, https://support.apple.com/en-us/HT213342, https://support.apple.com/en-us/HT213343, https://support.apple.com/en-us/HT213344, https://support.apple.com/en-us/HT213345, https://support.apple.com/en-us/HT213346

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -72cf468d459d29e5366e416c014faaaf281dfa2d

    Affected versions

    before_ftp_statemachine

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-32857 | CVE-DB