CVE-2022-32207 Misconfiguration in https://github.com/curl/curl
An attacker with local access can read sensitive cookie or HSTS data due to incorrect file permissions during atomic save operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-32207?
CVE-2022-32207 is a critical vulnerability in Apple Macos, published on 7 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
Which versions are affected by CVE-2022-32207?
It affects 14 products.
Products include Apple Macos, Debian Debian Linux, Fedoraproject Fedora, Haxx Curl, Netapp Bootstrap Os, Netapp Clustered Data Ontap and 8 more.
How do I fix CVE-2022-32207?
Upgrade to a fixed version.
Is CVE-2022-32207 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-32207 exists.
Other vulnerabilities in Apple Macos
Sources
Also known as ALPINE-CVE-2022-32207, AZL-10103, CLEANSTART-2026-YS64326, CURL-CVE-2022-32207, DEBIAN-CVE-2022-32207, ECHO-b1fb-a478-e297 and 3 more.