HIGH🇵🇱 Wersja polska

CVE-2019-16992

CVSS 7.5v3.1pub. 2019-09-30upd. 2024-11-21

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Keybase

    APP
    Keybase
    2.13.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-7249CRITICAL9.8ten sam produkt

In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bug...

CVE-2021-34422HIGH7.2ten sam produkt

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the ...

CVE-2018-18629HIGH7.8ten sam produkt

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted...

CVE-2021-34426MEDIUM5.3ten sam produkt

A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the...

CVE-2021-23827MEDIUM5.5ten sam produkt

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obt...