CVE-2021-21396

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the "GET /users/list-clients" endpoint. The endpoint could be used by any logged in user who coul...

CVE-2021-21396: Exposure of Sensitive Information to an Unauthorized Actor

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the GET /users/list-clients endpoint. The endpoint could be used by any logged in user who could...

PT-2021-14474

Name of the Vulnerable Software and Affected Versions wire-server versions 2021-02-16 through 2021-03-02 Description The client metadata of all users was exposed in the "GET /users/list-clients" endpoint. This endpoint could be used by any logged-in user to request client details of any other use...