Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2008-6540
HistoryMar 30, 2009 - 1:00 a.m.

CVE-2008-6540

2009-03-3001:00:00
mitre
www.cve.org
4

AI Score

6.7

Confidence

Low

EPSS

0.064

Percentile

93.7%

JSON

DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys.

Related

nessus 1
github 1
exploitdb 1
prion 1
osv 1
cve 1
nvd 1
nessus
nessus
DNN (DotNetNuke) Upgrade Process ValidationKey Generation Weakness Privilege Escalation
2008-03-25 00:00:00
github
github
DotNetNuke Default Machine Key Exposure
2022-05-14 02:38:47
exploitdb
exploitdb
DotNetNuke 4.8.1 - Default 'ValidationKey' and 'DecriptionKey' Weak Encryption
2008-03-21 00:00:00
prion
prion
Design/Logic Flaw
2009-03-30 01:30:00
osv
osv
DotNetNuke Default Machine Key Exposure
2022-05-14 02:38:47
cve
cve
CVE-2008-6540
2009-03-30 01:30:00
nvd
nvd
CVE-2008-6540
2009-03-30 01:30:00

AI Score

6.7

Confidence

Low

EPSS

0.064

Percentile

93.7%

JSON
Related for CVELIST:CVE-2008-6540
nessus1github1exploitdb1prion1osv1cve1nvd1