Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The UI Lock feature in qBittorrent version 3.3.15 is vulnerable to Authentication Bypass, which allows Attack to gain unauthorized access to qBittorrent functions by tampering the affected flag value of the config file at the C:\Users\<username>\Roaming\qBittorrent pathname. The attacker must change the value of the "locked" attribute to "false" within the "Locking" stanza. NOTE: This is an intended behavior. See https://github.com/qbittorrent/qBittorrent/wiki/I-forgot-my-UI-lock-password
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
qBittorrent 授权问题漏洞
Vulnerability Description
qBittorrent是一款跨平台的轻量级BitTorrent客户端。 qBittorrent 3.3.15版本中的UI Lock功能存在身份验证漏洞。攻击者可通过篡改C:UsersRoamingqBittorrent路径下配置文件的flag值利用该漏洞获取qBittorrent功能未授权的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A