CVE-2021-21396

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the "GET /users/list-clients" endpoint. The endpoint could be used by any logged in user who coul...

CVE-2021-21396: Exposure of Sensitive Information to an Unauthorized Actor

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the GET /users/list-clients endpoint. The endpoint could be used by any logged in user who could...

wire-server 信息泄露漏洞

Wire is a chat software by an individual developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original greeting method, PING. An information disclosure vulnerability exists in wire-server, which stems from th...

PT-2021-14474

Name of the Vulnerable Software and Affected Versions wire-server versions 2021-02-16 through 2021-03-02 Description The client metadata of all users was exposed in the "GET /users/list-clients" endpoint. This endpoint could be used by any logged-in user to request client details of any other use...