PT-2021-17322 · Telegram · Telegram

Dhiraj · Published 2021-02-12 · Updated 2021-09-08 · CVE-2021-27205

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Telegram versions prior to 7.4 (212543) Stable on macOS

Description: The issue concerns the storage of self-destructed messages in a sandbox path on macOS, leading to sensitive information disclosure.

Recommendations: For versions prior to 7.4 (212543) Stable on macOS, update to version 7.4 (212543) Stable or later to resolve the issue.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-27205

Affected Products

Telegram

References · 6

• 🔥 https://youtube.com/watch?v=Go-4srm_1fQ · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27205 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27205 · Vendor Advisory
• https://inputzero.io/2020/12/telegram-privacy-fails-again.html · Note
• https://t.me/cvenotify/9884 · Telegram Post
• https://t.me/cibsecurity/23526 · Telegram Post