PT-2022-15540 · Apple · Apple Macos

Mickey Jin + 3 · Published 2022-01-26 · Updated 2023-08-08 · CVE-2022-22583

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Monterey 12.2 macOS versions prior to Big Sur 11.6.3 macOS Catalina versions prior to Security Update 2022-001

Description A permissions issue was addressed with improved validation, allowing an application to potentially access restricted files. This issue relates to bypassing macOS System Integrity Protection (SIP).

Recommendations For macOS Catalina, apply Security Update 2022-001 to resolve the issue. For macOS Big Sur, update to version 11.6.3 or later to resolve the issue. For macOS Monterey, update to version 12.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-22583

ZDI-22-811

Affected Products

Apple Macos

References · 16

• https://zerodayinitiative.com/advisories/ZDI-22-811 · Security Note
• https://support.apple.com/en-us/HT213054 · Vendor Advisory
• https://support.apple.com/en-us/HT213056 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22583 · Vendor Advisory
• https://support.apple.com/en-us/HT213055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22583 · Security Note
• https://t.me/secharvester/11998 · Telegram Post
• https://t.me/pentestingnews/18000 · Telegram Post
• https://support.apple.com/en-us/103173 · Note
• https://t.me/cybersecuritytechnologies/5293 · Telegram Post
• https://t.me/rnetsec/16381 · Telegram Post
• https://support.apple.com/en-us/102848 · Note
• https://t.me/true_secator/3863 · Telegram Post
• https://t.me/defcon_news/94556 · Telegram Post
• https://t.me/proxy_bar/1248 · Telegram Post