Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-24030. PoCs published by redteambrasil, underprotection.
AI-analyzed exploit summary This repository contains a writeup for CVE-2020-24030, detailing a weak token expiration vulnerability in ForLogic Qualiex v1 and v3. The vulnerability allows remote unauthenticated privilege escalation and sensitive data access via token reuse.
Description
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expired, invalidated, and bound to session context. Attempts to alter the token payload to extend its validity do not affect server-side validation."
Exploits (2)
This repository contains a writeup for CVE-2020-24030, detailing a weak token expiration vulnerability in ForLogic Qualiex v1 and v3. The vulnerability allows remote unauthenticated privilege escalation and sensitive data access via token reuse.
This repository contains a writeup for CVE-2020-24030, detailing a weak token expiration vulnerability in ForLogic Qualiex v1 and v3, allowing remote unauthenticated privilege escalation and sensitive data access via token reuse.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H