7.3

CVE-2020-0570

Exploit
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qt ≫ Qt Version < 5.9.10
Qt ≫ Qt Version >= 5.10.0 < 5.12.7
Qt ≫ Qt Version >= 5.13.0 < 5.14.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.553
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

https://bugreports.qt.io/browse/QTBUG-81272
Patch
Vendor Advisory
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1800604
Patch
Third Party Advisory
Issue Tracking