Login
Log in using an SSO provider:
Fedora Account System
Red Hat Associate
Red Hat Customer
Login using a Red Hat Bugzilla account
Forgot Password
Create an Account
Red Hat Bugzilla – Bug 2323332
Home
New
Search
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh102 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
[?]
This site requires JavaScript to be enabled to function correctly, please enable it.
Bug 2323332
(
CVE-2024-51774
) -
CVE-2024-51774
qBittorrent: RCE Vulnerability in qBittorrent Due to Improper SSL/TLS Certificate Validation
Summary:
CVE-2024-51774 qBittorrent: RCE Vulnerability in qBittorrent Due to Improper ...
Keywords
:
Security
Status
:
NEW
Alias:
CVE-2024-51774
Product:
Security Response
Classification:
Other
Component:
vulnerability
Sub Component:
---
Version:
unspecified
Hardware:
All
OS:
Linux
Priority:
urgent
Severity:
urgent
Target Milestone:
---
Assignee:
Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
2323592
2323593
2323594
2323595
2323596
Blocks:
TreeView+
depends on
/
blocked
Reported:
2024-11-02 06:01 UTC by
OSIDB Bzimport
Modified:
2024-11-04 19:16 UTC (
History
)
CC List:
0 users
Fixed In Version:
Doc Type:
If docs needed, set a value
Doc Text:
A flaw was found in qBittorrent's DownloadManager component. This vulnerability allows remote code execution via improper validation of SSL/TLS certificates, enabling attackers to perform man-in-the-middle and RCE attacks.
Clone Of:
Environment:
Last Closed:
Embargoed:
Attachments
(Terms of Use)
Description
OSIDB Bzimport
2024-11-02 06:01:14 UTC
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
Note
You need to
log in
before you can comment on or make changes to this bug.