What’s Vulnerable › Vulnerabilities

CVE-2020-24028

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-02 · updated 2026-06-17

Description

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced server-side, restricting actions to the user’s own permission scope."

Affected products

• Forlogic Qualiex: 1.0, 3.0

References

• https://forlogic.net
• https://github.com/underprotection/CVE-2020-24028
• https://qualiex.com
• https://forlogic.net
• https://github.com/underprotection/CVE-2020-24028
• https://qualiex.com

Get alerted when CVE-2020-24028 or the next vulnerability affects your stack