1 matches found
CVE-2020-9449: Use of Insufficiently Random Values
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...
8.8CVSS7.9AI score0.01036EPSS
SaveExploits0References2
20