CVE-2017-12778

CVE-2017-12778 describes an authentication bypass vulnerability in qBittorrent version 3.3.15's UI Lock feature. An attacker with local access can gain unauthorized access to qBittorrent functions by directly modifying the "locked" attribute in the configuration file to "false." This vulnerability has a CVSS v3 score of 7.1 (High), indicating that it requires local access and low privileges but can lead to high confidentiality and integrity impacts. While no public exploit code or active exploitation is reported, and community discussion is minimal, it's important to note that this behavior is considered "intended" by the developers, implying a design choice rather than a traditional software flaw.