CVE-2020-24029

Katalog CVE

CVSS 9.8 · Critical EPSS 2,0%

Kerentanan Improper Authentication pada forlogic qualiex. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated against registered user emails and require a valid, short-lived token."

Rincian

Terbit di NVD

2 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://qualiex.com product · advisory vendor
• https://github.com/underprotection/CVE-2020-24029 advisory pihak ketiga