wire-server vulnerabilities

2 known vulnerabilities in wire-server from Wireapp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  wire-server: Improper Authentication

  CVE-2022-31122Oct 18, 2022Wireapp

  Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attacker has certain details of SAML IdP metadata, and configures their own SAML on the same backend, the a

• 8.1 High severity

  wire-server: Improper Verification of Cryptographic Signature

  CVE-2022-23610Mar 16, 2022Wireapp

  wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams with