forlogic records

3 published records for vendor forlogic.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-24030Proof of concept	ForLogic Qualiex v1 and v3 has weak token expiration.forlogic · qualiex · CWE-672 Pre-auth	Critical9.8	—	2.6%	Sep 2, 2020
40Plan	CVE-2020-24029Proof of concept	Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simforlogic · qualiex · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.9%	Sep 2, 2020
36Monitor	CVE-2020-24028Proof of concept	ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user pforlogic · qualiex	High8.8	—	2.2%	Sep 2, 2020

CVE-2020-24030
40Plan
ForLogic Qualiex v1 and v3 has weak token expiration.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
forlogic · qualiexSep 2, 2020
CVE-2020-24029
40Plan
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a sim
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
forlogic · qualiexSep 2, 2020
CVE-2020-24028
36Monitor
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user p
HighCVSS 8.8Proof of conceptEPSS 2%
forlogic · qualiexSep 2, 2020