Forlogic Qualiex
3 CVEs affecting Forlogic Qualiex. Latest disclosed: 2020-09-02. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24030 | Critical | 9.8 | 2020-09-02 | ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOT… |
CVE-2020-24029 | Critical | 9.8 | 2020-09-02 | Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE… |
CVE-2020-24028 | High | 8.8 | 2020-09-02 | ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates… |