CVE-2021-34421
Last modified
CVE-2021-34421 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.. EPSS estimates a 0.69% chance of exploitation in the next 30 days.
Description
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Keybase | Keybase | 5.8.0 |
References
- https://explore.zoom.us/en/trust/security/security-bulletinThird Party Advisory
- https://explore.zoom.us/en/trust/security/security-bulletinThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34421?
How severe is CVE-2021-34421?
How do I fix CVE-2021-34421?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34416The network address administrative settings web portal for t…9.8
- CVE-2021-34417The network proxy page on the web portal for the Zoom On-Pre…7.2
- CVE-2021-34418The login routine of the web console in the Zoom On-Premise …5.3
- CVE-2021-34419In the Zoom Client for Meetings for Ubuntu Linux before vers…5.3
- CVE-2021-3442A flaw was found in the Red Hat OpenShift API Management pro…5.4
- CVE-2021-34420The Zoom Client for Meetings for Windows installer before ve…7.4
- CVE-2021-34422The Keybase Client for Windows before version 5.7.0 contains…9
- CVE-2021-34423A buffer overflow vulnerability was discovered in Zoom Clien…9.8
- CVE-2021-34424A vulnerability was discovered in the Zoom Client for Meetin…7.5
- CVE-2021-34425The Zoom Client for Meetings before version 5.7.3 (for Andro…6.1
- CVE-2021-34426A vulnerability was discovered in the Keybase Client for Win…7.8
- CVE-2021-34427In Eclipse BIRT versions 4.8.0 and earlier, an attacker can …9.8
Are you affected by CVE-2021-34421?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST