CVE-2023-24069

Severity Score

3.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file deletion, an attacker can still recover the file if it was previously replied to in a conversation. (Local filesystem access is needed by the attacker.) NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access.

Signal Desktop anterior a 6.2.0 en Windows, Linux y macOS permite a un atacante obtener archivos adjuntos potencialmente confidenciales enviados en mensajes desde el directorio attachments.noindex. Los archivos adjuntos almacenados en caché no se borran de manera efectiva. En algunos casos, incluso después de la eliminación de un archivo por iniciativa propia, un atacante aún puede recuperar el archivo si ya se le respondió en una conversación. (El atacante necesita acceso al sistema de archivos local). NOTA: el proveedor cuestiona la relevancia de este hallazgo porque el producto no está destinado a proteger contra adversarios con este grado de acceso local.

*Credits: N/A

CVSS Scores

NISTv3.1 3.3

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

Poc

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-01-23 CVE Reserved
2023-01-23 CVE Published
2024-08-02 CVE Updated
2024-08-02 First Exploit
2024-08-15 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (4)

URL	Tag	Source

URL	Date	SRC
https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	2024-08-02

URL	Date	SRC

URL	Date	SRC
https://signal.org/download/linux	2024-07-03
https://signal.org/download/macos	2024-07-03
https://signal.org/en/download/windows	2024-07-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Signal Search vendor "Signal"	Signal-desktop Search vendor "Signal" for product "Signal-desktop"	<= 6.2.0 Search vendor "Signal" for product "Signal-desktop" and version " <= 6.2.0"	-	Affected	in	Apple Search vendor "Apple"	Macos Search vendor "Apple" for product "Macos"	-	-	Safe
Signal Search vendor "Signal"	Signal-desktop Search vendor "Signal" for product "Signal-desktop"	<= 6.2.0 Search vendor "Signal" for product "Signal-desktop" and version " <= 6.2.0"	-	Affected	in	Linux Search vendor "Linux"	Linux Kernel Search vendor "Linux" for product "Linux Kernel"	-	-	Safe
Signal Search vendor "Signal"	Signal-desktop Search vendor "Signal" for product "Signal-desktop"	<= 6.2.0 Search vendor "Signal" for product "Signal-desktop" and version " <= 6.2.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe