CVE-2020-24028

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates

published September 2, 2020

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced server-side, restricting actions to the user’s own permission scope."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02278 · 83.0th percentile
Published
2020-09-02T16:14Z
EPSS history
Timeline
  • 02 SEP 16:14Z
    ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates
    cvelistv5