28 matches found
CVE-2020-24030
CVE-2020-24030 Description ForLogic Qualiex v1 et v3 a une expiration de jeton faible. Cela permet une escalade de privilèges à distance non authentifiée et d'accéder à des données sensibles via la réutilisation du jeton. Dates importantes Annonce au fournisseur : 2020-07-12 Date de divulgation...
CVE-2020-24028
CVE-2020-24028 Описание ForLogic Qualiex v1 и v3 позволяет любому аутентифицированному клиенту добиться повышения привилегий через создание пользователей, изменение паролей или обновление прав пользователя. Важные даты Уведомление производителю: 2020-07-12 Дата публичного раскрытия: 2020-08-31 Ти...
CVE-2020-24029
CVE-2020-24029 Описание Из-за возможности смены пароля без аутентификации в ForLogic Qualiex v1 и v3, права и данные клиента и администратора могут быть получены с помощью простого запроса. Важные даты Уведомление поставщику: 2020-07-12 Дата публичного раскрытия: 2020-08-31 Тип уязвимости...
CVE-2020-24030
CVE-2020-24030 Описание ForLogic Qualiex v1 и v3 имеют слабый срок действия токена. Это позволяет удалённо неаутентифицированному злоумышленнику повышать привилегии и получать доступ к чувствительным данным через повторное использование токена. Важные даты Объявление поставщику: 2020-07-12 Дата...
CVE-2020-24029
CVE-2020-24029 Описание Из-за неаутентифицированных изменений паролей в ForLogic Qualiex v1 и v3 можно получить доступ к данным и разрешениям клиентов и администраторов с помощью простого запроса. Важные даты Уведомление вендору: 2020-07-12 Дата публичного раскрытия: 2020-08-31 Тип уязвимости...
CVE-2020-24028
CVE-2020-24028 Описание ForLogic Qualiex v1 и v3 позволяет любому аутентифицированному клиенту повысить привилегии через создание пользователей, изменение паролей или обновление разрешений пользователей. Важные даты Уведомление продавцу: 2020-07-12 Дата публичного раскрытия: 2020-08-31 Тип...
CVE-2020-24029
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...
EUVD-2020-16764
Malware in sbrugna...
EUVD-2020-16765
Malware in sbrugna...
CVE-2020-24028
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...
CVE-2020-24029
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...
CVE-2020-24030
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...
CVE-2020-24029
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...
CVE-2020-24028
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...
CVE-2020-24030
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...
CVE-2020-24028
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...
Cross site request forgery (csrf)
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request...
Privilege escalation
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse...
Default credentials
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates...
CVE-2020-24028
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...