Vulnerability CVE-2022-22585

Vulnerability Name:

CVE-2022-22585 (CCN-218143)

Assigned:

2022-01-26

Published:

2022-01-26

Updated:

2022-03-28

Summary:

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-59

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2022-22585

Source: XF
Type: UNKNOWN
apple-watchos-cve202222585-info-disc(218143)

Source: CCN
Type: Apple security document HT213053
About the security content of iOS 15.3 and iPadOS 15.3

Source: MISC
Type: Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213053

Source: MISC
Type: Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213054

Source: MISC
Type: Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213055

Source: MISC
Type: Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213057

Source: CCN
Type: Apple security document HT213059
About the security content of watchOS 8.4

Source: MISC
Type: Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213059

Vulnerable Configuration:

Configuration 1:

cpe:/o:apple:ipados:*:*:*:*:*:*:*:* (Version < 15.3)

OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version < 15.3)

OR cpe:/o:apple:macos:*:*:*:*:*:*:*:* (Version < 11.6.3)

OR cpe:/o:apple:macos:*:*:*:*:*:*:*:* (Version >= 12.0.0 and < 12.2)

OR cpe:/o:apple:tvos:*:*:*:*:*:*:*:* (Version < 15.3)

OR cpe:/o:apple:watchos:*:*:*:*:*:*:*:* (Version < 8.4)

Denotes that component is vulnerable

BACK