CVE-2019-8790

MEDIUM

Swift < 5.1.1 - Insecure Storage of Sensitive Information via URLSession File Descriptor Mismanagement

Title source: llm
STIX 2.1

Description

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.

References (1)

Core 1
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210647

Scores

CVSS v3 5.5
EPSS 0.0035
EPSS Percentile 26.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-922
Status published
Products (1)
apple/swift < 5.1.1
Published Oct 27, 2020
Tracked Since Feb 18, 2026