This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s activity.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 4.3 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Secondary | 3.1 | 4.3 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| https://support.apple.com/en-us/HT213340 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213342 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213343 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213344 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213345 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213346 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/en-us/HT213340 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/en-us/HT213342 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/en-us/HT213343 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/en-us/HT213344 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/en-us/HT213345 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/en-us/HT213346 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |