VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jun 15, 2022· Updated Jun 17, 2026

CVE-2022-32550

CVE-2022-32550

Description

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • 1password/1password6 versions
    cpe:2.3:a:1password:1password:*:*:*:*:*:android:*:*+ 5 more
    • cpe:2.3:a:1password:1password:*:*:*:*:*:android:*:*range: >=7.0,<7.9.3
    • cpe:2.3:a:1password:1password:*:*:*:*:*:iphone_os:*:*range: >=7.0,<7.9.6
    • cpe:2.3:a:1password:1password:*:*:*:*:*:linux:*:*range: >=8.0,<8.7.1
    • cpe:2.3:a:1password:1password:*:*:*:*:*:macos:*:*range: >=7.0,<7.9.5
    • cpe:2.3:a:1password:1password:*:*:*:*:*:windows:*:*range: >=7.0,<7.9.829
    • (no CPE)
  • 1password/1password In The Browser
    cpe:2.3:a:1password:1password_in_the_browser:*:*:*:*:*:*:*:*
    Range: <2.3.4
  • 1password/Command Line
    cpe:2.3:a:1password:command-line:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<2.3.0
  • 1password/Command Line Interface
    cpe:2.3:a:1password:command_line_interface:*:*:*:*:*:*:*:*
    Range: >=1.0.0,<1.12.5
  • 1password/Connect
    cpe:2.3:a:1password:connect:*:*:*:*:*:*:*:*
    Range: <1.5.3
  • 1password/Scim Bridge
    cpe:2.3:a:1password:scim_bridge:*:*:*:*:*:*:*:*
    Range: <2.3.2
  • AgileBits/1Passworddescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.