« Volver al listado

CVE-2020-23038

Estado: ModificadaAlta (7.5)—

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Kumilabs — Swift File Transfer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-23038",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-10-22T20:15:09.897",
  "references": [
    {
      "url": "https://www.vulnerability-lab.com/get_content.php?id=2205",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.vulnerability-lab.com/get_content.php?id=2205",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables."
    },
    {
      "lang": "es",
      "value": "Se ha detectado que Swift File Transfer Mobile versiones v1.1.2 y por debajo, contienen una vulnerabilidad de divulgación de información en el parámetro path. Esta vulnerabilidad es explotada por medio de un error causado por la inclusión de variables de entorno de ruta no existentes"
    }
  ],
  "lastModified": "2026-06-17T03:04:29.700",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:blackberry:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A361F79E-0DF1-43BA-B3C2-5AAB9B850B24",
              "versionEndIncluding": "1.0.19"
            },
            {
              "criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAC5ECC4-74FA-4206-80A3-11767875CB4F",
              "versionEndIncluding": "1.1.2"
            },
            {
              "criteria": "cpe:2.3:a:kumilabs:swift_file_transfer:*:*:*:*:*:iphone_os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "144390DF-9EEE-4BAC-9E8D-7A7C1C1FC2B2",
              "versionEndIncluding": "1.1.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}