CVE-2020-9449

An insecure random number generation vulnerability in BlaB!

published February 28, 2020

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitrary user or admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01036 · 63.6th percentile
Published
2020-02-28T20:19Z
EPSS history
Timeline
  • 28 FEB 20:19Z
    An insecure random number generation vulnerability in BlaB!
    cvelistv5