CVE-2020-23038

{"id": "CVE-2020-23038", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-10-22T20:15:09.897", "references": [{"url": "https://www.vulnerability-lab.com/get_content.php?id=2205", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.vulnerability-lab.com/get_content.php?id=2205", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables."}, {"lang": "es", "value": "Se ha detectado que Swift File Transfer Mobile versiones v1.1.2 y por debajo, contienen una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en el par\u00e1metro path. Esta vulnerabilidad es explotada por medio de un error causado por la inclusi\u00f3n de variables de entorno de ruta no existentes"}], "lastModified": "2024-11-21T05:13:30.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:blackberry:*:*", "vulnerable": true, "matchCriteriaId": "A361F79E-0DF1-43BA-B3C2-5AAB9B850B24", "versionEndIncluding": "1.0.19"}, {"criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "BAC5ECC4-74FA-4206-80A3-11767875CB4F", "versionEndIncluding": "1.1.2"}, {"criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "144390DF-9EEE-4BAC-9E8D-7A7C1C1FC2B2", "versionEndIncluding": "1.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}