Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
BID:70974
Info
Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
| Bugtraq ID: | 70974 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2014 12:00AM |
| Updated: | May 12 2015 07:53PM |
| Credit: | Jason A. Donenfeld |
| Vulnerable: |
Nokia Qt Creator 2.0 BETA Nokia Qt Creator 2.0 alpha Nokia Qt Creator 1.3 beta Nokia Qt Creator 1.0.2 Nokia Qt Creator 0.9.1 BETA Nokia Qt Creator 2.0.1 Nokia Qt Creator 2.0.0 RC1 Nokia Qt Creator 2.0.0 Nokia Qt Creator 1.3.1 Nokia Qt Creator 1.3.0 RC1 Nokia Qt Creator 1.3.0 Nokia Qt Creator 1.2.90 Nokia Qt Creator 1.1.0 Rc1 Nokia Qt Creator 1.1.0 Nokia Qt Creator 0.9.2 RC1 |
| Not Vulnerable: | |
Discussion
Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
Qt Creator is prone to a security-bypass vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to bypass certain security restrictions, which may lead to further attacks.
Qt Creator is prone to a security-bypass vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to bypass certain security restrictions, which may lead to further attacks.
Exploit / POC
Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Qt Creator SSH Client Man in the Middle Security Bypass Vulnerability
References:
References:
- QT Creator Homepage (Nokia)