Wire Information Disclosure Vulnerability (CNVD-2022-80682)

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire 3.22.3993 and earlier versions contain an information disclosure vulnerability that stems from its online chat messages stored in a log file in appdata. After deletion in chat, the stored messages remain readable for a limited period of time, and an attacker could exploit the vulnerability to obtain sensitive information.