RSS   Podatności dla 'Blab\! ax'   RSS

2020-02-28
 
CVE-2020-9449

CWE-330
 

 
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitrary user or admin.

 

 >>> Vendor: Justblab 4 Produkty
Blab\! ax
Blab\! ax pro
Blab\! ws
Blab\! ws pro


Copyright 2024, cxsecurity.com

 

Back to Top