Em resumo
- CVE-2018-18326 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta DotNetNuke.Core, dotnetnuke (dnnsoftware).
- Chance de exploração nos próximos 30 dias (EPSS): 54.3%, maior que 99.0% das vulnerabilidades.
- Correção: atualize para 9.3.0 ou posterior.
Description
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
NVD description
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
Mais vulnerabilidades de DotNetNuke.Core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free