CVE-2020-24028

CVE-2020-24028 描述 ForLogic Qualiex v1 和 v3 允许任何经过身份验证的客户通过用户创建、密码更改或用户权限更新实现权限提升。 重要日期 公告（致供应商）：2020-07-12 公开披露日期：2020-08-31 漏洞类型 不安全的权限 产品供应商 ForLogic 受影响的产品代码库 Qualiex - v1 Qualiex - v3 其他版本可能受到影响，尤其是同一系列中的版本（尚未测试） 受影响组件 Qualiex 攻击类型 远程 影响：权限提升 是 影响：信息泄露 是 攻击向量...

CVE-2020-24029

CVE-2020-24029 描述 由于 ForLogic Qualiex v1 和 v3 中存在未经身份验证的密码更改，攻击者可通过一个简单的请求访问客户和管理员权限及数据。 重要日期 公告（致供应商）：2020-07-12 公开披露日期：2020-08-31 漏洞类型 访问控制不当 产品供应商 ForLogic 受影响产品代码库 Qualiex - v1 Qualiex - v3 其他版本也可能受影响，尤其是同一系列中的版本（尚未测试） 受影响组件 Qualiex 攻击类型 远程 影响：权限提升 是 影响：信息泄露 是 攻击向量...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2020-24028

CVE-2020-24028 描述 ForLogic Qualiex v1 和 v3 允许任何经过身份验证的客户通过创建用户、更改密码或更新用户权限来实现权限提升。 重要日期 通知供应商：2020-07-12 公开披露日期：2020-08-31 漏洞类型 不安全的权限配置 供应商 ForLogic 受影响的产品代码库 Qualiex - v1 Qualiex - v3 同一系列的其他版本也可能受影响（尚未测试） 受影响组件 Qualiex 攻击类型 远程 影响权限提升 是 影响信息泄露 是 攻击向量 经过身份验证的权限绕过允许更改密码、创建用户以及在用户信息更新时提升权限。...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

EUVD-2020-16764

Malware in sbrugna...

EUVD-2020-16765

Malware in sbrugna...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

Cross site request forgery (csrf)

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request...

Default credentials

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates...

Privilege escalation

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

CVE-2020-24028

The CVE-2020-24028 entry concerns ForLogic Qualiex v1 and v3. It states that an authenticated customer can achieve privilege escalation via actions such as creating users, changing passwords, or updating user permissions, within the user’s own permission scope. The supplier‑provided note (as of 2...

CVE-2020-24029

CVE-2020-24029 affects ForLogic Qualiex v1 and v3, where unauthenticated password changes could expose customer/admin permissions and data via a simple request. The root cause is unauthenticated password changes; as of 2025-10-14, the supplier indicates this is corrected in all maintained version...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...