PT-2024-41057 · Unknown · Qbittorrent

Published 2024-11-12 · Updated 2024-11-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions qBittorrent (affected versions not specified)

Description The issue concerns the failure to verify SSL certificates in the DownloadManager class. Specifically, if the verification of a certificate failed, the application would log an error and continue without interrupting the process. This behavior was present from 2010 until October 2024.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2024-0359

Affected Products

Qbittorrent

References · 5

• https://osv.dev/vulnerability/MGASA-2024-0359 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0359.html · Security Note
• https://openwall.com/lists/oss-security/2024/10/31/3 · Note
• https://bugs.mageia.org/show_bug.cgi?id=33712 · Note
• https://openwall.com/lists/oss-security/2024/10/30/4 · Note