Lucene search
HistoryNov 18, 2022 - 8:15 p.m.
CVE-2022-43673
wire messaging app
windows
message retrieval
database vulnerability
cve-2022-43673
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.9%
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppData\Roaming\Wire\IndexedDB\https_app.wire.com_0.indexeddb.leveldb database.
Affected configurations
Node
wirewireRange≤3.22.3993windows
Related
cve
cve
CVE-2022-43673
2022-11-18 20:15:10
prion
prion
Design/Logic Flaw
2022-11-18 20:15:00
cvelist
cvelist
CVE-2022-43673
2022-11-18 00:00:00
cnvd
cnvd
Wire Information Disclosure Vulnerability (CNVD-2022-80682)
2022-11-23 00:00:00
osv
osv
CVE-2022-43673
2022-11-18 20:15:10
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.9%
Related for NVD:CVE-2022-43673