CVE-2020-0570CWE-426

CVE-2020-0570

High · published September 14, 2020

CVSS v3.1
7.3
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00568 · 46.3th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2020-09-14T23:15Z
Affected products (5)
ProductVersionsFixed in
qt/qt< 5.9.105.9.10
qt/qt≥ 5.10.0, < 5.12.75.12.7
qt/qt≥ 5.13.0, < 5.14.05.14.0
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (6)
https://bugreports.qt.io/browse/QTBUG-81272 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1800604 · [email protected]https://lists.qt-project.org/pipermail/development/2020-January/038534.html · [email protected]https://bugreports.qt.io/browse/QTBUG-81272 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1800604 · af854a3a-2127-422b-91ae-364da2661108https://lists.qt-project.org/pipermail/development/2020-January/038534.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 SEP 18:17Z
    Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via…
    cvelistv5