CVE-2022-32550

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-325517.5Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/CVE-2022-325528.8Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FACVE-2022-325538.8Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FACVE-2022-325549.8Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FACVE-2022-325558.8Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST requesCVE-2022-325567.5An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes.CVE-2022-325577.5An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers.CVE-2022-325587.5An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure.CVE-2022-325599.1An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics.CVE-2022-32567.8Use After Free in GitHub repository vim/vim prior to 9.0.0530.CVE-2022-325607.5An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.CVE-2022-325614.9An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insu
CVE-2022-32550: Medium severity, CVSS 4.8 | Vulnix