PT-2020-15622 · Forlogic · Forlogic Qualiex

Published 2020-09-02 · Updated 2025-10-14 · CVE-2020-24030

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ForLogic Qualiex versions v1 through v3

Description The issue allows remote unauthenticated privilege escalation and access to sensitive data via token reuse due to weak token expiration.

Recommendations ForLogic Qualiex versions v1 through v3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-672

Related Identifiers

CVE-2020-24030

Affected Products

Forlogic Qualiex

References · 5

• 🔥 https://github.com/underprotection/CVE-2020-24030 · Exploit
• https://qualiex.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24030 · Security Note
• https://t.me/cveNotify/138505 · Telegram Post