qualiex vulnerabilities and fixes

Recent CVEs affecting qualiex, with upgrade or downgrade steps. 3 tracked.

qualiex has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-02. Highest priority: CVE-2020-24030 (score 61/100).

• CVE-2020-24030 CRITICAL 9.8 DOWNGRADE ForLogic Qualiex v1 and v3 has weak token expiration
• CVE-2020-24029 CRITICAL 9.8 DOWNGRADE Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and
• CVE-2020-24028 HIGH 8.8 DOWNGRADE ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creation

FAQ

How do I fix qualiex vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qualiex being exploited right now?

None of the tracked qualiex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qualiex CVE should I patch first?

CVE-2020-24030 currently ranks highest (61/100): ForLogic Qualiex v1 and v3 has weak token expiration.

RSS feed for qualiex · ← Back to latest CVEs