CVE-2021-32755

 

Published at: - 13-07-2021 11:15

Last modified: - 23-11-2022 08:59

Total changes: - 5

Description

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new websocket implementation is not configured to enforce certificate pinning when available. Certificate pinning for the new websocket is enforced in version 3.84 or above.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

 

Verification logic

 

Reference

• https://github.com/wireapp/wire-ios-transport/security/advisories/GHSA-v8mx-h3vj-w39v

 

Keywords

NVD

 

CVE-2021-32755

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures