CVE-2020-15230 - OpenCVE

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:S/C:P/I:N/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Vapor Project	Vapor

Configuration 1 [-]

cpe:2.3:a:vapor_project:vapor:*:*:*:*:*:swift:*:*

References

Link	Resource
https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255	Patch Third Party Advisory
https://github.com/vapor/vapor/pull/2500	Third Party Advisory
https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: GitHub_M

Published: 2020-10-02T18:55:14

Updated: 2020-10-02T18:55:14

Reserved: 2020-06-25T00:00:00

Link: CVE-2020-15230

JSON object: View

NVD Information

Status : Analyzed

Published: 2020-10-02T19:15:12.963

Modified: 2022-06-07T18:11:58.050

Link: CVE-2020-15230

JSON object: View

Redhat Information

No data.

CWE

CWE-22

{"containers": {"cna": {"affected": [{"product": "vapor", "vendor": "vapor", "versions": [{"status": "affected", "version": "< 4.29.4"}]}], "descriptions": [{"lang": "en", "value": "Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "{\"CWE-22\":\"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\"}", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-10-02T18:55:14", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/vapor/vapor/pull/2500"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255"}], "source": {"advisory": "GHSA-vcvg-xgr8-p5gq", "discovery": "UNKNOWN"}, "title": "Arbitrary file read un Vapor", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2020-15230", "STATE": "PUBLIC", "TITLE": "Arbitrary file read un Vapor"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "vapor", "version": {"version_data": [{"version_value": "< 4.29.4"}]}}]}, "vendor_name": "vapor"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "{\"CWE-22\":\"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\"}"}]}]}, "references": {"reference_data": [{"name": "https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq", "refsource": "CONFIRM", "url": "https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq"}, {"name": "https://github.com/vapor/vapor/pull/2500", "refsource": "MISC", "url": "https://github.com/vapor/vapor/pull/2500"}, {"name": "https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255", "refsource": "MISC", "url": "https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255"}]}, "source": {"advisory": "GHSA-vcvg-xgr8-p5gq", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2020-15230", "datePublished": "2020-10-02T18:55:14", "dateReserved": "2020-06-25T00:00:00", "dateUpdated": "2020-10-02T18:55:14", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vapor_project:vapor:*:*:*:*:*:swift:*:*", "matchCriteriaId": "C41B270D-7ADE-411A-94D1-0F5961973B0B", "versionEndExcluding": "4.29.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4."}, {"lang": "es", "value": "Vapor es un framework web para Swift. En Vapor versiones anteriores a 4.29.4, los atacantes pueden acceder a datos en rutas arbitrarias del sistema de archivos en el mismo host como una aplicaci\u00f3n. Solo las aplicaciones que usan FileMiddleware est\u00e1n afectadas. Esto es corregido en la versi\u00f3n 4.29.4"}], "id": "CVE-2020-15230", "lastModified": "2022-06-07T18:11:58.050", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2020-10-02T19:15:12.963", "references": [{"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/vapor/vapor/pull/2500"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Primary"}]}