Critical · published March 16, 2022
🚨 A crafty attacker can impersonate any Wire user with just a few pieces of information! 🔥 Think of it like a restaurant that allows anyone to walk in and pretend to be a VIP — all they need is the right code to say at the door. In this case, the malicious actor tricks the system into trusting them as if they are a genuine customer, despite having no actual reservation. An attacker could log in as any user within a Wire team using SAML SSO, potentially gaining access to sensitive information and communications. Even more alarming, if SCIM isn't enabled, they can create new accounts with fake credentials, leading to a complete breach of trust in the team's communication platform. This could result in the unauthorized disclosure of data, undermining the security of your entire organization!
Think of it like a restaurant that allows anyone to walk in and pretend to be a VIP — all they need is the right code to say at the door. In this case, the malicious actor tricks the system into trusting them as if they are a genuine customer, despite having no actual reservation. This vulnerability allows attackers to bypass SAML SSO by exploiting the ability to craft DSA signatures that are incorrectly trusted by the wire-server. By doing so, they can impersonate any user and even create new accounts if SCIM is not in play.
An attacker could log in as any user within a Wire team using SAML SSO, potentially gaining access to sensitive information and communications. Even more alarming, if SCIM isn't enabled, they can create new accounts with fake credentials, leading to a complete breach of trust in the team's communication platform. This could result in the unauthorized disclosure of data, undermining the security of your entire organization! To protect your Wire instance, update your version of wire-server to 2022-01-27 immediately. If you're running on-premise instances, make sure they're patched as soon as possible, as none of the known workarounds will safeguard you. Check the GitHub Security Advisory for more details on mitigation strategies! You've got this! With these steps, you'll be back to secure communication in no time. 🛡️