← Back

Blab! Ws Pro

blab!_ws_pro

Vendor: Justblab • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9449
1Justblab
4Blab! Ax
Blab! Ax ProBlab! Ws+1 more
Jun 17, 2026
Feb 28, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by...Show more
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitrary user or admin.Show less