Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 1.8epss 0.1%
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
Qt · Qt