Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-34421
CVE-2021-34421:
Keybase vulnerability analysis and mitigation
Overview
A vulnerability was identified in Zoom version 0 that fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background. This vulnerability is tracked as CVE-2021-34421 (NVD).
Technical details
The vulnerability has been assessed with the following CVSS v3.1 metrics: Attack Vector (AV): Network, Attack Complexity (AC): Low, Privileges Required (PR): None, User Interaction (UI): Required, Scope (S): Unchanged, Confidentiality Impact (C): Low, Integrity Impact (I): None, Availability Impact (A): None (NVD CNA Status).
Impact
The vulnerability affects the confidentiality of chat messages, potentially allowing unauthorized access to exploded (self-destructing) messages that should have been removed from the chat session (NVD).
Exploitability
The vulnerability requires network access and user interaction for exploitation. No authentication is required to exploit this vulnerability, though the attack complexity is considered low (NVD CNA Status).
Additional resources
Source: This report was generated using AI
Related Keybase vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management