CVE:CVE-2020-9449
CNNVD:CNNVD-202002-1315
BlaB! AX和BlaB! WS中安全漏洞。攻击者可通过检索cookie盐值并创建有效的会话利用该漏洞提升权限。以下产品及版本受到影响：BlaB! AX 19.11版本，BlaB! AX Pro 19.11版本；BlaB! WS (client)19.11版本，BlaB! WS Pro (client)19.11版本。
solution:Upgrade justblab blab!_ax to a higher version than 19.11,and avoid the version 19.11; Upgrade justblab blab!_ax_pro to a higher version than 19.11,and avoid the version 19.11; Upgrade justblab blab!_ws to a higher version than 19.11,and avoid the version 19.11; Upgrade justblab blab!_ws_pro to a higher version than 19.11,and avoid the version 19.11