Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/28 12:00 a.m.•2 views

CVE-2020-9449: Use of Insufficiently Random Values

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...

8.8CVSS7.9AI score0.01036EPSS
SaveExploits0References2
Rows per page
Query Builder