CVE-2021-21301

Katalog CVE

CVSS 4.3 · Medium EPSS 1,0%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada wire. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75.

Rincian

Terbit di NVD

11 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40 patch · advisory pihak ketiga
• https://github.com/wireapp/wire-ios/pull/4879 patch · advisory pihak ketiga
• https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf patch · advisory pihak ketiga