CVE-2022-34770 is a high-severity vulnerability affecting the Tabit web system, which can lead to unauthorized access to sensitive information such as health statements, previous bills, alcohol consumption, and smoking habits. This issue is related to broken object level authorization and rate limiting and impacts software versions up to (excluding) 3.27.0. To protect against this vulnerability, it's crucial to apply the latest updates and follow the recommendations provided by the object-level National Vulnerability Database and the Israel National Cyber Directorate.

How do I know if I'm affected?

If you're using the Tabit web system, you might be affected by this vulnerability. This issue can lead to unauthorized access to sensitive information like health statements, previous bills, and personal habits. The vulnerability impacts Tabit software versions up to (excluding) 3.27.0. Signs of being affected may include unauthorized access to such sensitive information. However, there's no mention of specific Apple product versions being affected by this vulnerability.

What should I do if I'm affected?

If you're affected, it's important to take action to protect your sensitive information. First, update your Tabit software to version 3.27.0 or later. Then, consistently apply the latest updates to safeguard against known vulnerabilities. Remember, staying up-to-date with software updates is crucial for maintaining security.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-34770 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This vulnerability affects the Tabit web system and can lead to unauthorized access to sensitive information.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-639, which involves a weakness called Authorization Bypass Through User-Controlled, which can lead to unauthorized access to sensitive information in the Tabit web system.

For more details

CVE-2022-34770 is a high-severity vulnerability affecting the Tabit web system, which can lead to unauthorized access to sensitive information. To protect against this issue, it's crucial to update your Tabit software to version 3.27.0 or later and consistently apply the latest updates. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2022-34770

• CVE Advisories | Israel National Cyber Directorate