What is CVE-2021-32755?

CVE-2021-32755 is a vulnerability that affects the wire-ios-transport component used by the Wire collaboration platform.

What is the severity of CVE-2021-32755?

The severity of CVE-2021-32755 is medium with a CVSS score of 4.3.

How does CVE-2021-32755 affect Wire?

CVE-2021-32755 affects the wire-ios-transport component of the Wire iOS application, specifically in its websocket implementation.

What is the affected software version of CVE-2021-32755?

The affected software version of CVE-2021-32755 is up to but excluding version 3.84 of the Wire iOS application.

Is Apple iPhone OS vulnerable to CVE-2021-32755?

No, Apple iPhone OS is not vulnerable to CVE-2021-32755. The vulnerability only affects the Wire iOS application.

Is there a fix available for CVE-2021-32755?

Yes, a fix for CVE-2021-32755 is available in version 3.84 or later of the Wire iOS application.

Where can I find more information about CVE-2021-32755?

You can find more information about CVE-2021-32755 in the security advisory on the Wire iOS Transport GitHub repository: [link](https://github.com/wireapp/wire-ios-transport/security/advisories/GHSA-v8mx-h3vj-w39v).

Vulnerability/
CVE-2021-32755

medium

5.4

CWE

295

13/7/2021

16/7/2021

CVE-2021-32755

First published: Tue Jul 13 2021(Updated: )

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new websocket implementation is not configured to enforce certificate pinning when available. Certificate pinning for the new websocket is enforced in version 3.84 or above.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
Wire Wire	<3.84
Apple iPhone OS	>=13.0

Never miss a vulnerability like this again

Reference Links

https://github.com/wireapp/wire-ios-transport/security/advisories/GHSA-v8mx-h3vj-w39v

Frequently Asked Questions

What is CVE-2021-32755?
CVE-2021-32755 is a vulnerability that affects the wire-ios-transport component used by the Wire collaboration platform.
What is the severity of CVE-2021-32755?
The severity of CVE-2021-32755 is medium with a CVSS score of 4.3.
How does CVE-2021-32755 affect Wire?
CVE-2021-32755 affects the wire-ios-transport component of the Wire iOS application, specifically in its websocket implementation.
What is the affected software version of CVE-2021-32755?
The affected software version of CVE-2021-32755 is up to but excluding version 3.84 of the Wire iOS application.
Is Apple iPhone OS vulnerable to CVE-2021-32755?
No, Apple iPhone OS is not vulnerable to CVE-2021-32755. The vulnerability only affects the Wire iOS application.
Is there a fix available for CVE-2021-32755?
Yes, a fix for CVE-2021-32755 is available in version 3.84 or later of the Wire iOS application.
Where can I find more information about CVE-2021-32755?
You can find more information about CVE-2021-32755 in the security advisory on the Wire iOS Transport GitHub repository: [link](https://github.com/wireapp/wire-ios-transport/security/advisories/GHSA-v8mx-h3vj-w39v).

collector/nvd-index
agent/weakness
agent/references
agent/severity
agent/author
agent/tags
agent/description
agent/type
agent/event
agent/softwarecombine
agent/first-publish-date
agent/last-modified-date
vendor/wire
canonical/wire wire
vendor/apple
canonical/apple iphone os
version/apple iphone os/13.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.