Uncontrolled Search Path Vulnerability in QT Library by The QT Company
CVE-2020-0570

7.3HIGH

Key Information:

Vendor

Qt

Status
Qt Library
Vendor
CVE Published:
14 September 2020

What is CVE-2020-0570?

The QT Library prior to version 5.14.0, 5.12.7, and 5.9.10 contains an uncontrolled search path vulnerability. This flaw could be exploited by authenticated users to elevate privileges locally, allowing unauthorized access to sensitive resources. Organizations utilizing affected QT Library versions should prioritize the application of security updates to mitigate this risk and protect their systems from potential exploitation.

Affected Version(s)

QT Library Fixed in qt 5.14.0, qt 5.12.7, qt 5.9.10

References

https://bugzilla.redhat.com/show_bug.cgi?id=1800604
x_refsource_MISC
https://bugreports.qt.io/browse/QTBUG-81272
x_refsource_CONFIRM
https://lists.qt-project.org/pipermail/development/2020-J...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.