CVE-2022-32833

An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213446	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213442	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213488	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213446	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213442	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213488	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::

History

21 Apr 2025, 19:15

Type	Values Removed	Values Added
CWE		CWE-922

21 Nov 2024, 07:07

Type	Values Removed	Values Added
Summary		(es) Existía un problema con las rutas de archivo utilizadas para almacenar datos del sitio web. El problema se resolvió mejorando la forma en que se almacenan los datos del sitio web. Este problema se solucionó en iOS 16. Es posible que un usuario no autorizado pueda acceder al historial de navegación.
References	~~() https://support.apple.com/en-us/HT213446 - Release Notes, Vendor Advisory~~	() https://support.apple.com/en-us/HT213446 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/kb/HT213442 - Release Notes, Vendor Advisory~~	() https://support.apple.com/kb/HT213442 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/kb/HT213488 - Release Notes, Vendor Advisory~~	() https://support.apple.com/kb/HT213488 - Release Notes, Vendor Advisory

Information

Published : 2022-12-15 19:15

Updated : 2025-04-21 19:15

NVD link : CVE-2022-32833

Mitre link : CVE-2022-32833

CVE.ORG link : CVE-2022-32833

JSON object : View

Products Affected

apple

macos
safari
iphone_os

CWE

NVD-CWE-noinfo CWE-922

Insecure Storage of Sensitive Information

{"id": "CVE-2022-32833", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-12-15T19:15:17.777", "references": [{"url": "https://support.apple.com/en-us/HT213446", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/kb/HT213442", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/kb/HT213488", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT213446", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT213442", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT213488", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-922"}]}], "descriptions": [{"lang": "en", "value": "An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history."}, {"lang": "es", "value": "Exist\u00eda un problema con las rutas de archivo utilizadas para almacenar datos del sitio web. El problema se resolvi\u00f3 mejorando la forma en que se almacenan los datos del sitio web. Este problema se solucion\u00f3 en iOS 16. Es posible que un usuario no autorizado pueda acceder al historial de navegaci\u00f3n."}], "lastModified": "2025-04-21T19:15:17.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5F783A1-114C-4DFC-9F2E-0D43D62CBC69", "versionEndExcluding": "16.0"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D9387F-63B6-41B3-8BDC-A6102EE5F1E2", "versionEndExcluding": "16.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71E032AD-F827-4944-9699-BB1E6D4233FC", "versionEndExcluding": "13.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}