Vulnerability in Qt
CVE-2020-0570
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Qt
- Redhat Enterprise_linux — versions 7.0, 8.0
- N/a Qt Library — versions Fixed in qt 5.14.0, qt 5.12.7, qt 5.9.10
Weakness classification (CWE)
References
- secure@intel.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
- secure@intel.com (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM, Mailing List, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-0570?
- CVE-2020-0570 is a high-severity vulnerability in Qt, classified under Untrusted Search Path. CVSS score: 7.3/10. Published 2020-09-14.
- How severe is CVE-2020-0570?
- High severity. CVSS v3 base score is 7.3 out of 10.