CVE-2021-32755
Last modified
CVE-2021-32755 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new websocket implementation is not configured to enforce certificate pinning when available. Certificate pinning for the new websocket is enforced in version 3.84 or above.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wire | Wire | < 3.84 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-32755?
How severe is CVE-2021-32755?
How do I fix CVE-2021-32755?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3275Unauthenticated stored cross-site scripting (XSS) exists in …6.1
- CVE-2021-32750MuWire is a file publishing and networking tool that protect…5.7
- CVE-2021-32751Gradle is a build tool with a focus on build automation. In …7.5
- CVE-2021-32752Ether Logs is a package that allows one to check one's logs …4.9
- CVE-2021-32753EdgeX Foundry is an open source project for building a commo…6.5
- CVE-2021-32754FlowDroid is a data flow analysis tool. FlowDroid versions p…5.3
- CVE-2021-32756ManageIQ is an open-source management platform. In versions …8.8
- CVE-2021-32758OpenMage Magento LTS is an alternative to the Magento CE off…7.2
- CVE-2021-32759OpenMage magento-lts is an alternative to the Magento CE off…7.2
- CVE-2021-32760containerd is a container runtime. A bug was found in contai…6.3
- CVE-2021-32761Redis is an in-memory database that persists on disk. A vuln…7.5
- CVE-2021-32762Redis is an open source, in-memory database that persists on…8.8
Are you affected by CVE-2021-32755?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST