csirt@kutim:~/threat-intel/cve/CVE-2022-23605

Katalog CVE

CVSS 2.3 · Low EPSS 0,31%

Kerentanan Improper Removal of Sensitive Information Before Storage or Transfer pada wire-webapp. Skor CVSS 3.1 2.3 (Low) menurut NVD.

Deskripsi (NVD)

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible through the local search functionality. Any attempt to view one of these message in the chat view will then trigger the deletion. This issue only affects locally stored messages. On premise instances of wire-webapp need to be updated to 2022-01-27-production.0, so that their users are no longer affected. There are no known workarounds for this issue.

Rincian

Terbit di NVD
4 Februari 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
2.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
EPSS (30 hari)
0,31% peluang dieksploitasi; lebih tinggi dari 21,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
wire wire-webapp Versi 2016-07-29-17-00
wire wire-webapp Versi 2016-08-04-15-44
wire wire-webapp Versi 2016-08-23-09-31
wire wire-webapp Versi 2016-08-24-10-10
wire wire-webapp Versi 2016-08-29-14-54
wire wire-webapp Versi 2016-09-08-15-38
wire wire-webapp Versi 2016-09-19-14-01
wire wire-webapp Versi 2016-09-28-14-58
wire wire-webapp Versi 2016-10-11-15-34
wire wire-webapp Versi 2016-10-18-08-10
wire wire-webapp Versi 2016-10-25-08-17
wire wire-webapp Versi 2016-10-26-18-58
wire wire-webapp Versi 2016-11-03-16-09
wire wire-webapp Versi 2016-11-08-15-06
wire wire-webapp Versi 2016-12-01-12-57
wire wire-webapp Versi 2016-12-13-15-12
wire wire-webapp Versi 2017-01-23-12-12
wire wire-webapp Versi 2017-02-01-14-49
wire wire-webapp Versi 2017-02-17-10-10
wire wire-webapp Versi 2017-02-24-13-06
wire wire-webapp Versi 2017-03-08-17-32
wire wire-webapp Versi 2017-03-14-15-05
wire wire-webapp Versi 2017-03-21-11-00
wire wire-webapp Versi 2017-03-27-17-10
wire wire-webapp Versi 2017-03-28-14-23
wire wire-webapp Versi 2017-04-05-16-58
wire wire-webapp Versi 2017-04-07-09-42
wire wire-webapp Versi 2017-04-19-12-31
wire wire-webapp Versi 2017-04-20-15-54
wire wire-webapp Versi 2017-05-03-10-29
wire wire-webapp Versi 2017-05-19-16-10
wire wire-webapp Versi 2017-05-26-08-16
wire wire-webapp Versi 2017-05-26-12-03
wire wire-webapp Versi 2017-06-01-10-02
wire wire-webapp Versi 2017-06-07-15-03
wire wire-webapp Versi 2017-06-07-18-05
wire wire-webapp Versi 2017-06-22-12-18
wire wire-webapp Versi 2017-06-28-15-13
wire wire-webapp Versi 2017-07-06-12-44
wire wire-webapp Versi 2017-07-06-15-48
wire wire-webapp Versi 2017-07-18-12-50
wire wire-webapp Versi 2017-08-03-15-19
wire wire-webapp Versi 2017-08-04-09-04
wire wire-webapp Versi 2017-08-04-15-01
wire wire-webapp Versi 2017-08-08-15-09
wire wire-webapp Versi 2017-08-24-10-57
wire wire-webapp Versi 2017-08-31-14-21
wire wire-webapp Versi 2017-09-26-07-18
wire wire-webapp Versi 2017-09-26-13-00
wire wire-webapp Versi 2017-10-09-08-42
wire wire-webapp Versi 2017-10-19-10-45
wire wire-webapp Versi 2017-10-25-07-08
wire wire-webapp Versi 2017-11-07-08-50
wire wire-webapp Versi 2017-11-10-10-41
wire wire-webapp Versi 2017-12-04-10-23
wire wire-webapp Versi 2017-12-04-13-34
wire wire-webapp Versi 2017-12-07-11-13
wire wire-webapp Versi 2017-12-20-12-48
wire wire-webapp Versi 2018-01-24-18-11
wire wire-webapp Versi 2018-02-01-10-26

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 348 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.