CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

CVE-2021-41094

CVE-2021-41094 affects Wire (wire-ios and related Wire apps) where encryption at rest can be bypassed if the device passcode is disabled or not set. On launch, the app attempts to enable encryption keys via the Secure Enclave but fails silently when no passcode is present, leaving users unaware t...

CVE-2021-41094 Mandatory encryption at rest can be bypassed (UI) in Wire app

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...