PT-2022-7242 · Apple · Ipados+4

John Balestrieri · Published 2022-12-13 · Updated 2024-01-17 · CVE-2022-46710

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iCloud Photo Library versions prior to iOS 16.2 iCloud Photo Library versions prior to iPadOS 16.2 iCloud Photo Library versions prior to macOS Ventura 13.1

Description The issue is related to a logic problem that has been addressed with improved checks. It may allow an attacker to disclose protected information. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.

Recommendations For versions prior to iOS 16.2, update to iOS 16.2 or later. For versions prior to iPadOS 16.2, update to iPadOS 16.2 or later. For versions prior to macOS Ventura 13.1, update to macOS Ventura 13.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-841

Related Identifiers

BDU:2024-00681

CVE-2022-46710

Affected Products

Apple Macos

Icloud Photo Library

Ios

Ipados

Macos Ventura

References · 10

• https://support.apple.com/en-us/HT213530 · Vendor Advisory
• https://support.apple.com/en-us/HT213532 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46710 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46710 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00681 · Security Note
• https://t.me/cvenotify/67739 · Telegram Post
• https://support.apple.com/en-us/102808 · Note
• https://vuldb.com/ru/?id.250380 · Note
• https://t.me/cvenotify/67745 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46710 · Note