RSS   Podatności dla 'Qualiex'   RSS

2020-09-02
 
CVE-2020-24030

CWE-672
 
 
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse.

 
 
CVE-2020-24029

CWE-287
 
 
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.

 
 
CVE-2020-24028

CWE-732
 
 
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.

 

Copyright 2024, cxsecurity.com

 

Back to Top