GitHub Advisoryadvisory · NuGet

GHSA-pf46-gqg9-j3v3 Insufficient Entropy in DotNetNuke

HIGH Published 2019-07-05 Modified 2021-08-17 Official page ↗

Aliases: CVE-2018-15812
Ecosystem: NuGet
Packages: DotNetNuke.Core
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-331
Reviewed: 2019-07-05

Affected packages

• NuGet DotNetNuke.Core: >= 9.2.0, < 9.2.2 → fixed in 9.2.2

Description

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

Related

Alias · CVE (1)

CVE-2018-15812 DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy. vulnerability

Weakness · CWE (1)

CWE-331 Insufficient Entropy weakness

References