CVE-2021-21396

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-21396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-21396
Aliases
  • GHSA-qx8q-rhq2-rg4j
Published
2021-03-26T22:15:12Z
Modified
2024-05-30T02:48:27.749216Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the GET /users/list-clients endpoint. The endpoint could be used by any logged in user who could request client details of any other user (no connection required) as far as they can find their User ID. The exposed metadata included id, class, type, location, time, and cookie. A user on a Wire backend could use this endpoint to find registration time and location for each device for a given list of users. As a workaround, remove /list-clients from nginx config. This has been fixed in version 2021-03-02.

References

Affected packages

Git / github.com/wireapp/wire-server

Affected ranges

Type
GIT
Repo
https://github.com/wireapp/wire-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

Other

2019-05-13
v2018-10-04
v2018-10-25
v2018-11-16
v2018-11-28
v2018-12-06
v2019-01-10
v2019-01-24
v2019-02-18
v2019-02-22
v2019-02-28
v2019-03-25
v2019-04-09
v2019-05-02
v2019-05-13
v2019-07-08
v2019-08-08
v2019-09-03
v2019-09-16
v2019-09-30
v2019-11-06
v2019-11-28
v2019-12-20
v2020-01-09
v2020-01-30
v2020-02-06
v2020-02-18
v2020-02-27
v2020-03-10
v2020-04-15
v2020-04-21
v2020-05-07
v2020-05-15
v2020-06-03
v2020-06-10
v2020-06-19
v2020-07-13
v2020-07-29
v2020-09-04
v2020-10-05
v2020-10-28
v2020-11-25
v2020-12-15
v2020-12-21
v2021-01-06
v2021-01-12
v2021-01-15
v2021-02-16
v2021-02-25

chart=2.*

chart=2.100.0,image=2.100.0
chart=2.100.2,image=2.100.2
chart=2.100.3,image=2.100.3
chart=2.100.4,image=2.100.4
chart=2.100.8,image=2.100.8
chart=2.100.9,image=2.100.9
chart=2.101.0,image=2.101.0
chart=2.101.1,image=2.101.1
chart=2.95.10,image=2.95.10
chart=2.95.11,image=2.95.11
chart=2.95.13,image=2.95.13
chart=2.95.14,image=2.95.14
chart=2.95.17,image=2.95.17
chart=2.95.18,image=2.95.18
chart=2.95.19,image=2.95.19
chart=2.95.7,image=2.95.7
chart=2.95.8,image=2.95.8
chart=2.95.9,image=2.95.9
chart=2.96.0,image=2.96.0
chart=2.96.1,image=2.96.1
chart=2.96.2,image=2.96.2
chart=2.96.5,image=2.96.5
chart=2.96.6,image=2.96.6
chart=2.97.0,image=2.97.0
chart=2.97.2,image=2.97.2
chart=2.98.0,image=2.98.0
chart=2.98.1,image=2.98.1
chart=2.98.10,image=2.98.10
chart=2.98.11,image=2.98.11
chart=2.98.13,image=2.98.13
chart=2.98.14,image=2.98.14
chart=2.98.15,image=2.98.15
chart=2.98.17,image=2.98.17
chart=2.98.2,image=2.98.2
chart=2.98.5,image=2.98.5
chart=2.98.7,image=2.98.7
chart=2.98.9,image=2.98.9
chart=2.99.11,image=2.99.11
chart=2.99.12,image=2.99.12
chart=2.99.2,image=2.99.2

deb/3.*

deb/3.0.2
deb/3.0.3
deb/3.0.4
deb/3.10.0
deb/3.10.1
deb/3.10.10
deb/3.10.11
deb/3.10.12
deb/3.10.13
deb/3.10.14
deb/3.10.15
deb/3.10.16
deb/3.10.17
deb/3.10.18
deb/3.10.19
deb/3.10.2
deb/3.10.20
deb/3.10.21
deb/3.10.22
deb/3.10.23
deb/3.10.24
deb/3.10.25
deb/3.10.26
deb/3.10.28
deb/3.10.3
deb/3.10.4
deb/3.10.5
deb/3.10.6
deb/3.10.7
deb/3.10.8
deb/3.10.9
deb/3.11.0
deb/3.12.0
deb/3.12.1
deb/3.13.0
deb/3.13.1
deb/3.13.2
deb/3.13.3
deb/3.13.4
deb/3.13.5
deb/3.13.6
deb/3.13.7
deb/3.14.0
deb/3.14.1
deb/3.14.2
deb/3.14.3
deb/3.14.4
deb/3.14.5
deb/3.14.6
deb/3.14.7
deb/3.15.0
deb/3.15.1
deb/3.15.2
deb/3.15.3
deb/3.15.4
deb/3.15.5
deb/3.15.6
deb/3.16.0
deb/3.17.0
deb/3.17.1
deb/3.17.11
deb/3.17.12
deb/3.17.13
deb/3.17.14
deb/3.17.2
deb/3.17.3
deb/3.17.4
deb/3.17.5
deb/3.17.6
deb/3.17.7
deb/3.17.8
deb/3.17.9
deb/3.18.0
deb/3.18.1
deb/3.18.10
deb/3.18.11
deb/3.18.12
deb/3.18.13
deb/3.18.2
deb/3.18.3
deb/3.18.4
deb/3.18.5
deb/3.18.6
deb/3.18.7
deb/3.18.8
deb/3.18.9
deb/3.19.0
deb/3.19.1
deb/3.19.10
deb/3.19.11
deb/3.19.12
deb/3.19.13
deb/3.19.14
deb/3.19.15
deb/3.19.16
deb/3.19.17
deb/3.19.18
deb/3.19.19
deb/3.19.2
deb/3.19.20
deb/3.19.21
deb/3.19.22
deb/3.19.23
deb/3.19.24
deb/3.19.25
deb/3.19.26
deb/3.19.3
deb/3.19.4
deb/3.19.5
deb/3.19.6
deb/3.19.7
deb/3.19.8
deb/3.19.9
deb/3.2.0
deb/3.2.1
deb/3.2.11
deb/3.2.2
deb/3.2.4
deb/3.2.5
deb/3.2.6
deb/3.2.7
deb/3.2.8
deb/3.20.0
deb/3.20.1
deb/3.20.10
deb/3.20.11
deb/3.20.12
deb/3.20.13
deb/3.20.14
deb/3.20.2
deb/3.20.3
deb/3.20.4
deb/3.20.5
deb/3.20.6
deb/3.20.7
deb/3.20.8
deb/3.20.9
deb/3.21.0
deb/3.21.1
deb/3.21.3
deb/3.21.4
deb/3.22.0
deb/3.22.1
deb/3.22.2
deb/3.22.3
deb/3.22.4
deb/3.22.5
deb/3.23.0
deb/3.23.1
deb/3.23.10
deb/3.23.11
deb/3.23.12
deb/3.23.13
deb/3.23.2
deb/3.23.3
deb/3.23.5
deb/3.23.7
deb/3.23.8
deb/3.23.9
deb/3.24.0
deb/3.24.1
deb/3.24.10
deb/3.24.12
deb/3.24.13
deb/3.24.15
deb/3.24.16
deb/3.24.17
deb/3.24.18
deb/3.24.19
deb/3.24.2
deb/3.24.3
deb/3.24.4
deb/3.24.5
deb/3.24.6
deb/3.24.7
deb/3.24.8
deb/3.24.9
deb/3.25.0
deb/3.26.1
deb/3.26.10
deb/3.26.11
deb/3.26.12
deb/3.26.13
deb/3.26.14
deb/3.26.16
deb/3.26.17
deb/3.26.18
deb/3.26.2
deb/3.26.3
deb/3.26.4
deb/3.26.5
deb/3.26.6
deb/3.26.7
deb/3.26.8
deb/3.26.9
deb/3.27.0
deb/3.27.10
deb/3.27.11
deb/3.27.12
deb/3.27.2
deb/3.27.3
deb/3.27.4
deb/3.27.5
deb/3.27.6
deb/3.27.7
deb/3.27.8
deb/3.27.9
deb/3.28.0
deb/3.28.1
deb/3.28.10
deb/3.28.11
deb/3.28.12
deb/3.28.13
deb/3.28.14
deb/3.28.15
deb/3.28.16
deb/3.28.17
deb/3.28.18
deb/3.28.3
deb/3.28.6
deb/3.28.7
deb/3.28.8
deb/3.28.9
deb/3.29.0
deb/3.29.1
deb/3.29.2
deb/3.29.3
deb/3.29.4
deb/3.29.5
deb/3.3.0
deb/3.3.1
deb/3.3.10
deb/3.3.11
deb/3.3.12
deb/3.3.13
deb/3.3.14
deb/3.3.15
deb/3.3.16
deb/3.3.17
deb/3.3.18
deb/3.3.2
deb/3.3.3
deb/3.3.4
deb/3.3.5
deb/3.3.6
deb/3.3.7
deb/3.3.8
deb/3.30.0
deb/3.30.1
deb/3.30.2
deb/3.30.3
deb/3.30.5
deb/3.30.6
deb/3.30.7
deb/3.31.0
deb/3.31.1
deb/3.31.10
deb/3.31.11
deb/3.31.13
deb/3.31.14
deb/3.31.15
deb/3.31.16
deb/3.31.17
deb/3.31.18
deb/3.31.19
deb/3.31.2
deb/3.31.20
deb/3.31.21
deb/3.31.22
deb/3.31.23
deb/3.31.24
deb/3.31.25
deb/3.31.26
deb/3.31.27
deb/3.31.3
deb/3.31.4
deb/3.31.5
deb/3.31.6
deb/3.31.7
deb/3.31.9
deb/3.32.0
deb/3.32.1
deb/3.32.10
deb/3.32.11
deb/3.32.12
deb/3.32.2
deb/3.32.3
deb/3.32.4
deb/3.32.5
deb/3.32.6
deb/3.32.7
deb/3.32.8
deb/3.32.9
deb/3.33.0
deb/3.34.0
deb/3.34.1
deb/3.34.2
deb/3.34.3
deb/3.34.4
deb/3.34.5
deb/3.34.6
deb/3.34.7
deb/3.34.8
deb/3.34.9
deb/3.35.0
deb/3.35.1
deb/3.4.0
deb/3.4.1
deb/3.4.2
deb/3.4.3
deb/3.5.0
deb/3.5.1
deb/3.5.2
deb/3.6.0
deb/3.6.1
deb/3.6.2
deb/3.6.3
deb/3.6.4
deb/3.6.5
deb/3.6.6
deb/3.6.7
deb/3.6.8
deb/3.7.0
deb/3.7.1
deb/3.7.10
deb/3.7.11
deb/3.7.12
deb/3.7.13
deb/3.7.14
deb/3.7.15
deb/3.7.16
deb/3.7.17
deb/3.7.18
deb/3.7.19
deb/3.7.2
deb/3.7.20
deb/3.7.21
deb/3.7.22
deb/3.7.3
deb/3.7.4
deb/3.7.6
deb/3.7.7
deb/3.7.8
deb/3.7.9
deb/3.8.0
deb/3.9.0
deb/3.9.1
deb/3.9.3
deb/3.9.4
deb/3.9.5
deb/3.9.6
deb/3.9.7

image-2.*

image-2.50.314
image-2.50.315
image-2.50.316
image-2.50.317
image-2.50.318
image-2.50.319

image/2.*

image/2.100.0
image/2.100.2
image/2.100.3
image/2.100.4
image/2.100.8
image/2.100.9
image/2.101.0
image/2.101.1
image/2.50.332
image/2.50.333
image/2.50.334
image/2.50.335
image/2.50.336
image/2.50.337
image/2.50.338
image/2.50.339
image/2.50.340
image/2.50.341
image/2.50.342
image/2.50.344
image/2.50.345
image/2.50.346
image/2.50.347
image/2.51.0
image/2.51.10
image/2.51.11
image/2.51.12
image/2.51.13
image/2.51.14
image/2.51.15
image/2.51.16
image/2.51.17
image/2.51.18
image/2.51.19
image/2.51.2
image/2.51.3
image/2.51.4
image/2.51.5
image/2.51.6
image/2.51.8
image/2.51.9
image/2.52.0
image/2.52.13
image/2.52.14
image/2.52.15
image/2.52.16
image/2.52.17
image/2.52.18
image/2.52.19
image/2.52.2
image/2.52.20
image/2.52.21
image/2.52.22
image/2.52.24
image/2.52.25
image/2.52.3
image/2.52.4
image/2.52.5
image/2.52.6
image/2.53.0
image/2.53.1
image/2.53.2
image/2.53.3
image/2.53.4
image/2.53.5
image/2.53.6
image/2.53.7
image/2.53.8
image/2.54.0
image/2.54.2
image/2.54.3
image/2.55.0
image/2.55.1
image/2.55.2
image/2.55.3
image/2.56.0
image/2.56.1
image/2.57.0
image/2.57.1
image/2.57.2
image/2.57.3
image/2.57.4
image/2.57.5
image/2.57.7
image/2.58.0
image/2.58.1
image/2.58.10
image/2.58.12
image/2.58.13
image/2.58.15
image/2.58.16
image/2.58.2
image/2.58.3
image/2.58.4
image/2.58.5
image/2.58.6
image/2.58.7
image/2.58.8
image/2.58.9
image/2.59.0
image/2.59.1
image/2.59.10
image/2.59.11
image/2.59.12
image/2.59.2
image/2.59.3
image/2.59.4
image/2.59.5
image/2.59.6
image/2.59.8
image/2.59.9
image/2.60.0
image/2.60.1
image/2.60.10
image/2.60.11
image/2.60.2
image/2.60.3
image/2.60.4
image/2.60.5
image/2.60.6
image/2.60.7
image/2.60.8
image/2.60.9
image/2.61.0
image/2.62.0
image/2.62.10
image/2.62.11
image/2.62.2
image/2.62.3
image/2.62.4
image/2.62.5
image/2.62.6
image/2.62.7
image/2.62.8
image/2.62.9
image/2.63.0
image/2.63.1
image/2.63.10
image/2.63.11
image/2.63.12
image/2.63.13
image/2.63.15
image/2.63.16
image/2.63.18
image/2.63.2
image/2.63.20
image/2.63.21
image/2.63.22
image/2.63.23
image/2.63.24
image/2.63.25
image/2.63.26
image/2.63.27
image/2.63.28
image/2.63.29
image/2.63.3
image/2.63.30
image/2.63.4
image/2.63.5
image/2.63.6
image/2.63.7
image/2.63.8
image/2.63.9
image/2.64.0
image/2.64.1
image/2.65.0
image/2.65.1
image/2.65.2
image/2.65.3
image/2.65.4
image/2.65.5
image/2.65.6
image/2.65.7
image/2.65.8
image/2.65.9
image/2.66.0
image/2.66.1
image/2.66.2
image/2.66.3
image/2.66.4
image/2.66.5
image/2.66.6
image/2.66.7
image/2.67.0
image/2.67.1
image/2.67.3
image/2.68.0
image/2.69.0
image/2.69.1
image/2.69.3
image/2.70.0
image/2.70.10
image/2.70.11
image/2.70.12
image/2.70.13
image/2.70.14
image/2.70.16
image/2.70.17
image/2.70.18
image/2.70.19
image/2.70.20
image/2.70.21
image/2.70.3
image/2.70.4
image/2.70.5
image/2.70.6
image/2.70.7
image/2.70.8
image/2.70.9
image/2.71.0
image/2.72.0
image/2.72.2
image/2.72.3
image/2.73.0
image/2.73.10
image/2.73.11
image/2.73.12
image/2.73.13
image/2.73.14
image/2.73.15
image/2.73.16
image/2.73.17
image/2.73.18
image/2.73.2
image/2.73.3
image/2.73.4
image/2.73.5
image/2.73.6
image/2.73.7
image/2.73.8
image/2.73.9
image/2.74.0
image/2.74.1
image/2.75.0
image/2.75.1
image/2.75.2
image/2.75.3
image/2.75.4
image/2.75.5
image/2.75.6
image/2.75.7
image/2.75.8
image/2.76.0
image/2.76.10
image/2.76.11
image/2.76.12
image/2.76.13
image/2.76.14
image/2.76.15
image/2.76.16
image/2.76.17
image/2.76.18
image/2.76.19
image/2.76.2
image/2.76.20
image/2.76.3
image/2.76.4
image/2.76.5
image/2.76.6
image/2.76.7
image/2.76.8
image/2.76.9
image/2.77.0
image/2.77.1
image/2.77.10
image/2.77.11
image/2.77.12
image/2.77.13
image/2.77.14
image/2.77.15
image/2.77.16
image/2.77.17
image/2.77.18
image/2.77.19
image/2.77.2
image/2.77.20
image/2.77.21
image/2.77.22
image/2.77.23
image/2.77.24
image/2.77.25
image/2.77.26
image/2.77.3
image/2.77.4
image/2.77.5
image/2.77.6
image/2.77.7
image/2.77.9
image/2.78.0
image/2.78.1
image/2.78.2
image/2.78.3
image/2.79.0
image/2.79.1
image/2.79.2
image/2.80.0
image/2.80.1
image/2.80.2
image/2.80.3
image/2.80.4
image/2.80.5
image/2.80.6
image/2.80.7
image/2.80.8
image/2.81.0
image/2.81.1
image/2.81.10
image/2.81.11
image/2.81.12
image/2.81.13
image/2.81.14
image/2.81.15
image/2.81.16
image/2.81.17
image/2.81.18
image/2.81.19
image/2.81.2
image/2.81.3
image/2.81.4
image/2.81.5
image/2.81.6
image/2.81.7
image/2.81.8
image/2.81.9
image/2.82.0
image/2.82.1
image/2.82.2
image/2.82.3
image/2.82.4
image/2.82.5
image/2.82.6
image/2.83.0
image/2.83.1
image/2.83.10
image/2.83.11
image/2.83.12
image/2.83.13
image/2.83.17
image/2.83.18
image/2.83.19
image/2.83.2
image/2.83.20
image/2.83.21
image/2.83.22
image/2.83.23
image/2.83.24
image/2.83.3
image/2.83.4
image/2.83.5
image/2.83.6
image/2.83.7
image/2.83.8
image/2.83.9
image/2.84.0
image/2.84.1
image/2.84.2
image/2.84.3
image/2.84.4
image/2.84.5
image/2.84.6
image/2.84.7
image/2.84.8
image/2.85.0
image/2.85.2
image/2.85.3
image/2.85.4
image/2.85.5
image/2.85.6
image/2.86.0
image/2.86.1
image/2.86.10
image/2.86.11
image/2.86.12
image/2.86.13
image/2.86.14
image/2.86.15
image/2.86.16
image/2.86.17
image/2.86.19
image/2.86.2
image/2.86.20
image/2.86.3
image/2.86.4
image/2.86.5
image/2.86.6
image/2.86.7
image/2.86.8
image/2.86.9
image/2.87.0
image/2.87.1
image/2.87.10
image/2.87.11
image/2.87.2
image/2.87.3
image/2.87.4
image/2.87.5
image/2.87.6
image/2.87.7
image/2.87.8
image/2.87.9
image/2.88.0
image/2.88.1
image/2.88.10
image/2.88.11
image/2.88.12
image/2.88.13
image/2.88.14
image/2.88.15
image/2.88.16
image/2.88.17
image/2.88.18
image/2.88.19
image/2.88.2
image/2.88.20
image/2.88.21
image/2.88.3
image/2.88.4
image/2.88.5
image/2.88.6
image/2.88.7
image/2.88.8
image/2.88.9
image/2.89.0
image/2.89.1
image/2.89.10
image/2.89.2
image/2.89.3
image/2.89.4
image/2.89.5
image/2.89.6
image/2.89.7
image/2.89.8
image/2.89.9
image/2.90.0
image/2.90.1
image/2.90.11
image/2.90.12
image/2.90.13
image/2.90.14
image/2.90.15
image/2.90.16
image/2.90.17
image/2.90.18
image/2.90.2
image/2.90.3
image/2.90.4
image/2.90.5
image/2.90.6
image/2.90.7
image/2.90.8
image/2.90.9
image/2.91.0
image/2.93.0
image/2.93.10
image/2.93.14
image/2.93.16
image/2.93.18
image/2.93.5
image/2.93.6
image/2.93.7
image/2.94.0
image/2.94.1
image/2.94.10
image/2.94.3
image/2.94.5
image/2.94.6
image/2.94.7
image/2.94.8
image/2.94.9
image/2.95.0
image/2.95.1
image/2.95.10
image/2.95.11
image/2.95.12
image/2.95.13
image/2.95.14
image/2.95.16
image/2.95.17
image/2.95.18
image/2.95.19
image/2.95.3
image/2.95.6
image/2.95.7
image/2.95.8
image/2.95.9
image/2.96.0
image/2.96.1
image/2.96.2
image/2.96.5
image/2.96.6
image/2.97.0
image/2.97.1
image/2.97.2
image/2.97.3
image/2.97.7
image/2.98.0
image/2.98.1
image/2.98.10
image/2.98.11
image/2.98.13
image/2.98.14
image/2.98.15
image/2.98.17
image/2.98.19
image/2.98.2
image/2.98.22
image/2.98.23
image/2.98.4
image/2.98.5
image/2.98.7
image/2.98.9
image/2.99.0
image/2.99.1
image/2.99.11
image/2.99.12
image/2.99.2
image/2.99.5
image/2.99.6
image/2.99.7
image/2.99.8
image/2.99.9