CVE-2020-0570
qt: files placed by attacker can influence the working directory and lead to malicious code execution
Severity Score
7.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
Una ruta de búsqueda no controlada en QT Library versiones anteriores a 5.14.0, 5.12.7 y 5.9.10, puede permitir a un usuario autenticado habilitar potencialmente una elevación de privilegios por medio un acceso local
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-10-28 CVE Reserved
- 2020-02-04 CVE Published
- 2024-01-18 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-73: External Control of File Name or Path
- CWE-426: Untrusted Search Path
CAPEC
References (4)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://bugreports.qt.io/browse/QTBUG-81272 | 2024-08-04 |
| URL | Date | SRC |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1800604 | 2020-11-04 |
| URL | Date | SRC |
|---|---|---|
| https://lists.qt-project.org/pipermail/development/2020-January/038534.html | 2021-09-21 | |
| https://access.redhat.com/security/cve/CVE-2020-0570 | 2020-11-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qt Search vendor "Qt" | Qt Search vendor "Qt" for product "Qt" | < 5.9.10 Search vendor "Qt" for product "Qt" and version " < 5.9.10" | - |
Affected
| ||||||
| Qt Search vendor "Qt" | Qt Search vendor "Qt" for product "Qt" | >= 5.10.0 < 5.12.7 Search vendor "Qt" for product "Qt" and version " >= 5.10.0 < 5.12.7" | - |
Affected
| ||||||
| Qt Search vendor "Qt" | Qt Search vendor "Qt" for product "Qt" | >= 5.13.0 < 5.14.0 Search vendor "Qt" for product "Qt" and version " >= 5.13.0 < 5.14.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 7.0 Search vendor "Redhat" for product "Enterprise Linux" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 8.0 Search vendor "Redhat" for product "Enterprise Linux" and version "8.0" | - |
Affected
| ||||||