wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation - All the participants in the conversation were previously marked as verified. The vulnerability is patched in wire-ios version 3.8.1. As a workaround, one can unverify & verify a device in the conversation.
References
| Link | Resource |
|---|---|
| https://github.com/wireapp/wire-ios-data-model/commit/bf9db85886b12a20c8374f55b7c4a610e8ae9220 | Patch Third Party Advisory |
| https://github.com/wireapp/wire-ios/security/advisories/GHSA-mc65-7w99-c6qv | Patch Third Party Advisory |
| https://github.com/wireapp/wire-ios-data-model/commit/bf9db85886b12a20c8374f55b7c4a610e8ae9220 | Patch Third Party Advisory |
| https://github.com/wireapp/wire-ios/security/advisories/GHSA-mc65-7w99-c6qv | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 06:07
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 8.8 |
| References | () https://github.com/wireapp/wire-ios-data-model/commit/bf9db85886b12a20c8374f55b7c4a610e8ae9220 - Patch, Third Party Advisory | |
| References | () https://github.com/wireapp/wire-ios/security/advisories/GHSA-mc65-7w99-c6qv - Patch, Third Party Advisory |
Information
Published : 2021-06-03 21:15
Updated : 2024-11-21 06:07
NVD link : CVE-2021-32665
Mitre link : CVE-2021-32665
CVE.ORG link : CVE-2021-32665
JSON object : View
Products Affected
wire
- wire
CWE
CWE-345
Insufficient Verification of Data Authenticity