CVE-2020-24030

CVE-2020-24030 Descrizione ForLogic Qualiex v1 e v3 ha una scadenza del token debole. Ciò consente l'escalation dei privilegi in remoto senza autenticazione e l'accesso a dati sensibili tramite il riutilizzo del token. Date importanti Annuncio al fornitore: 2020-07-12 Data di divulgazione pubblic...

CVE-2020-24028

CVE-2020-24028 Descrizione ForLogic Qualiex v1 e v3 consente a qualsiasi cliente autenticato di ottenere un'escalation dei privilegi tramite la creazione di utenti, la modifica delle password o l'aggiornamento dei permessi utente. Date importanti Annuncio al fornitore: 2020-07-12 Data di...

CVE-2020-24028

CVE-2020-24028 Descrizione ForLogic Qualiex v1 e v3 consentono a qualsiasi cliente autenticato di ottenere un'escalation dei privilegi tramite creazione di utenti, modifiche delle password o aggiornamenti dei permessi utente. Date importanti Annuncio al fornitore: 2020-07-12 Data di divulgazione...

CVE-2020-24030

CVE-2020-24030 Descrizione ForLogic Qualiex v1 e v3 ha una debole scadenza dei token. Ciò consente l'escalation dei privilegi da remoto senza autenticazione e l'accesso a dati sensibili tramite il riutilizzo dei token. Date importanti Annuncio al fornitore: 2020-07-12 Data di divulgazione pubblic...

CVE-2020-24029

CVE-2020-24029 Descrizione A causa di modifiche della password non autenticate in ForLogic Qualiex v1 e v3, i permessi e i dati di clienti e amministratori possono essere accessibili tramite una semplice richiesta. Date importanti Annuncio al fornitore: 2020-07-12 Data di divulgazione pubblica:...

CVE-2020-24029

CVE-2020-24029 Descrizione A causa di modifiche di password non autenticate in ForLogic Qualiex v1 e v3, le autorizzazioni e i dati di clienti e amministratori possono essere accessibili tramite una semplice richiesta. Date Importanti Annuncio al fornitore: 2020-07-12 Data di divulgazione pubblic...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

EUVD-2020-16764

Malware in sbrugna...

EUVD-2020-16765

Malware in sbrugna...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...

Cross site request forgery (csrf)

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request...

Privilege escalation

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse...

Default credentials

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates...

CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...