PT-2021-17321 · Telegram · Telegram

Dhiraj · Published 2021-02-12 · Updated 2021-09-08 · CVE-2021-27204

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Telegram versions prior to 7.4 (212543) Stable on macOS

Description: The issue concerns the storage of the local passcode in cleartext, leading to information disclosure.

Recommendations: For versions prior to 7.4 (212543) Stable on macOS, update to version 7.4 (212543) Stable or later to resolve the issue.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-27204

Affected Products

Telegram

References · 5

• 🔥 https://youtube.com/watch?v=zEt-_5b4OaA · Exploit
• https://osv.dev/vulnerability/CVE-2021-27204 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27204 · Security Note
• https://inputzero.io/2020/12/telegram-privacy-fails-again.html · Note
• https://t.me/cibsecurity/23521 · Telegram Post