Beveiligingsadvies

CVE-2021-32665

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-06-03 21:00:12
Laatst bijgewerkt 2024-08-03 23:25:31
Toegewezen door GitHub_M
CVSS-score 8.8
Status PUBLISHED

Beschrijving

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation - All the participants in the conversation were previously marked as verified. The vulnerability is patched in wire-ios version 3.8.1. As a workaround, one can unverify & verify a device in the conversation.