Lucene search
Veracode Vulnerability DatabaseVERACODE:20656HistoryJul 04, 2019 - 9:17 a.m.
Information Disclosure
2019-07-0409:17:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.011
Percentile
84.3%
DNN (DotNetNuke) is vulnerable to information disclosure. The use of a lower-than-expected entropy caused by an incorrect convertion of the encryption key source values allow attackers to retrieve confidential information. This vulnerability exists due to an incomplete fix for CVE-2018-15812.
References
Related
osv
osv
CVE-2018-18326
2019-07-03 17:15:10
Insufficient Entropy in DotNetNuke
2019-07-05 21:08:20
Insufficient Entropy in DotNetNuke
2019-07-05 21:08:24
prion
prion
Code injection
2019-07-03 17:15:00
Code injection
2019-07-03 17:15:00
cve
cve
CVE-2018-18326
2019-07-03 17:15:10
CVE-2018-15812
2019-07-03 17:15:10
nvd
nvd
CVE-2018-18326
2019-07-03 17:15:10
CVE-2018-15812
2019-07-03 17:15:10
github
github
Insufficient Entropy in DotNetNuke
2019-07-05 21:08:20
Insufficient Entropy in DotNetNuke
2019-07-05 21:08:24
cvelist
cvelist
CVE-2018-18326
2019-07-03 16:39:12
CVE-2018-15812
2019-07-03 16:35:30
openvas
openvas
DotNetNuke < 9.3.0 Multiple Vulnerabilities
2022-08-08 00:00:00
DotNetNuke 9.2.x < 9.2.2 Multiple Vulnerabilities
2022-08-08 00:00:00
attackerkb
attackerkb
CVE-2018-15812
2019-07-03 00:00:00
exploitdb
exploitdb
DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)
2020-04-16 00:00:00
packetstorm
packetstorm
DotNetNuke Cookie Deserialization Remote Code Execution
2020-04-03 00:00:00
veracode
veracode
Insecure Encryption Key
2019-07-04 05:05:07
zdt
zdt
DotNetNuke Cookie Deserialization Remote Code Execution Exploit
2020-04-03 00:00:00
metasploit
metasploit
DotNetNuke Cookie Deserialization Remote Code Excecution
2019-07-16 16:16:53