PT-2021-17409 · Telegram+1 · Telegram+1

Published 2021-02-01 · Updated 2022-05-23 · CVE-2021-27351

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Telegram versions through 7.2.1 for Android Telegram versions through 2.4.7 for Windows and UNIX

Description The Terminate Session feature in the Telegram application fails to invalidate a recently active session.

Recommendations For Telegram versions through 7.2.1 for Android, update to a version that fixes the Terminate Session feature issue. For Telegram versions through 2.4.7 for Windows and UNIX, update to a version that fixes the Terminate Session feature issue.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

ALT-PU-2021-1192

CVE-2021-27351

Affected Products

Alt Linux

Telegram

References · 12

• https://security.gentoo.org/glsa/202105-07 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-27351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-27351 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-27351 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-27351 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-27351 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27351 · Security Note
• https://t.me/cvenotify/15049 · Telegram Post
• https://t.me/cvenotify/10179 · Telegram Post
• https://t.me/cibsecurity/23881 · Telegram Post
• https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html · Note