PT-2020-6894 · Qt Company+6 · Qt Library+6
Thiago Macieira
·
Published
2020-01-10
·
Updated
2024-06-15
·
CVE-2020-0570
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
QT Library versions prior to 5.14.0
QT Library versions prior to 5.12.7
QT Library versions prior to 5.9.10
Description
The issue is related to an uncontrolled search path in the QT Library, which may allow an authenticated user to potentially enable elevation of privilege via local access. This vulnerability is associated with the use of an unreliable search path, and its exploitation can allow an attacker to elevate privileges in the system.
Recommendations
For QT Library versions prior to 5.14.0, update to version 5.14.0 or later.
For QT Library versions prior to 5.12.7, update to version 5.12.7 or later.
For QT Library versions prior to 5.9.10, update to version 5.9.10 or later.
Exploit
Fix
LPE
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Qt Library
Red Hat
Rocky Linux
Ubuntu