7.3

CVE-2020-0570

Exploit

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

Data is provided by the National Vulnerability Database (NVD)
Qt ≫ Qt Version < 5.9.10
Qt ≫ Qt Version >= 5.10.0 < 5.12.7
Qt ≫ Qt Version >= 5.13.0 < 5.14.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.24% 0.472
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

https://bugreports.qt.io/browse/QTBUG-81272
Patch
Vendor Advisory
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1800604
Patch
Third Party Advisory
Issue Tracking