PT-2022-26582 · Apple · Ipados+5

Om Kothawade · Published 2022-09-12 · Updated 2022-11-02 · CVE-2022-42790

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.7 macOS Monterey versions prior to 12.6 macOS Ventura version 13 is not affected, versions prior to 13 are not specified iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7

Description A logic issue was addressed with improved state management, allowing a user to potentially view restricted content from the lock screen.

Recommendations For macOS Big Sur, update to version 11.7 to resolve the issue. For macOS Monterey, update to version 12.6 to resolve the issue. For iOS, update to version 15.7 or 16 to resolve the issue. For iPadOS, update to version 15.7 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information on devices with affected versions until a patch is applied.

Fix

Related Identifiers

CVE-2022-42790

Affected Products

Apple Macos

Ios

Ipados

Macos Big Sur

Macos Monterey

Macos Ventura

References · 12

• https://osv.dev/vulnerability/CVE-2022-42790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42790 · Security Note
• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://support.apple.com/en-us/HT213443 · Vendor Advisory
• https://support.apple.com/en-us/HT213444 · Vendor Advisory
• https://support.apple.com/en-us/HT213445 · Vendor Advisory
• https://support.apple.com/en-us/HT213446 · Vendor Advisory
• https://support.apple.com/en-us/102841 · Note
• https://support.apple.com/en-us/102840 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42790 · Note
• https://support.apple.com/en-us/102853 · Note
• https://t.me/cibsecurity/52433 · Telegram Post