Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-23827

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.

Published

2021-02-23T00:15:12.533

Last Modified

2024-11-21T05:51:54.273

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Primary
CWE-312

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	keybase	keybase	< 5.6.0	Yes
Operating System	apple	macos	-	No
Operating System	microsoft	windows	-	No
Operating System	keybase	keybase	< 5.6.1	Yes
Operating System	redhat	linux	-	No

References

https://github.com/keybase/client/releases Release Notes, Third Party Advisory ([email protected])
https://hackerone.com/reports/1074930 Exploit, Issue Tracking, Third Party Advisory ([email protected])
https://johnjhacking.com/blog/cve-2021-23827/ Exploit, Third Party Advisory ([email protected])
https://github.com/keybase/client/releases Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://hackerone.com/reports/1074930 Exploit, Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://johnjhacking.com/blog/cve-2021-23827/ Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)