Lucene search
HistoryFeb 27, 2023 - 8:15 p.m.
CVE-2022-32846
cve-2022-32846
logic issue
state management
apple music
android
data access
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.8%
A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
Affected configurations
Node
appleapple_musicRange<3.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | apple_music | * | cpe:2.3:a:apple:apple_music:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Apple",
"product": "Apple Music for Android",
"versions": [
{
"version": "unspecified",
"lessThan": "3.9",
"status": "affected",
"versionType": "custom"
}
]
}
]References
Related
nvd
nvd
CVE-2022-32846
2023-02-27 20:15:11
cvelist
cvelist
CVE-2022-32846
2023-02-27 00:00:00
prion
prion
Code injection
2023-02-27 20:15:00
apple
apple
About the security content of Apple Music 3.9.10 for Android
2022-06-14 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.8%
Related for CVE-2022-32846