« Volver al listado

CVE-2020-9840

Estado: ModificadaAlta (7.5)—

In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — Nioextras

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9840",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Swift",
          "product": "SwiftNIO Extras",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "SwiftNIO Extras 1.4.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "next of SwiftNIO Extras 1.2.0",
              "lessThan": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-05-11T20:15:12.510",
  "references": [
    {
      "url": "https://github.com/apple/swift-nio-extras/security/advisories/GHSA-xhhr-p2r9-jmm7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "https://github.com/apple/swift-nio-extras/security/advisories/GHSA-xhhr-p2r9-jmm7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions."
    },
    {
      "lang": "es",
      "value": "En SwiftNIO Extras versiones anteriores a 1.4.1, un problema lógico fue corregido con restricciones mejoradas."
    }
  ],
  "lastModified": "2026-06-17T03:28:39.857",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:nioextras:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D2767C1-5A46-4EE0-8A21-A6AD9661D9CF",
              "versionEndExcluding": "1.4.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}