VULNERABILITY INTELLIGENCE

CVE-2020-24029

CVSS score9.8 CRITICAL
EPSS probability1.97%
CISA KEVNot currently listed
Published2020-09-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated against registered user emails and require a valid, short-lived token."

Weakness classification

  • nvd@nist.gov: CWE-287

Primary references