PT-2019-9183 · Dnn · Dnn
CVE-2018-15812
·
Publicado
2019-07-03
·
Atualizado
2023-03-03
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
DNN (aka DotNetNuke) versions 9.2 through 9.2.1
Description
The issue is related to incorrect conversion of encryption key source values, which results in lower than expected entropy.
Recommendations
For DNN (aka DotNetNuke) versions 9.2 through 9.2.1, update to a version that correctly handles encryption key source values to prevent lower than expected entropy.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dnn