CVE-2020-24028

Katalog CVE

CVSS 8.8 · High EPSS 2,3%

Kerentanan pada forlogic qualiex. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced server-side, restricting actions to the user’s own permission scope."

Rincian

Terbit di NVD

2 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 82,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://forlogic.net advisory vendor
• https://qualiex.com product · advisory vendor
• https://github.com/underprotection/CVE-2020-24028 advisory pihak ketiga