by Kastro CVE-2024-36048
qt qt_network_authorization — QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6…
Description · from the CVE record
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.
Affected
ProductAffectedFixed inSource
n/an/a–CNA
qt_network_authorization< 5.15.175.15.17CISA-ADP
qt_network_authorization6x – < 6.2.136.2.13CISA-ADP
qt_network_authorization6.3x – 6.5x–CISA-ADP
qt_network_authorization6.3x – < 6.5.66.5.6CISA-ADP
qt_network_authorization6.6x – 6.7x–CISA-ADP
qt_network_authorization6.6x – < 6.716.71CISA-ADP
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total