CVE-2022-22671 - An authentication issue was addressed with improved state management

Back Back to CVE browser

MEDIUM

An authentication issue was addressed with improved state management

Published Mar 18, 2022

4.6

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

Affected products

Vendor Apple Product iOS and iPadOS Default
unknown
Affected
- ≥ unspecified, < 15.4

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	iOS and iPadOS	unknown	Affected ≥ unspecified, < 15.4

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27816
Advisory
https://support.apple.com/en-us/HT213182
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27816		Advisory
https://support.apple.com/en-us/HT213182		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Mar 18, 2022

Updated Aug 3, 2024

Reserved Jan 5, 2022

Link CVE-2022-22671

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-22671

Red Hat

No data

ENISA EUVD

Assigner apple

Published Mar 18, 2022

Updated Aug 3, 2024

Link EUVD-2022-27816

GitHub

No data