CVE-2018-15812

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy

published July 3, 2019

CVSS
—
EPSS
47%
Percentile
98.8
In the wild
Unconfirmed
What it is

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.47194 · 98.8th percentile
Published
2019-07-03T16:35Z
EPSS history
Timeline
  • 03 JUL 16:35Z
    DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy
    cvelistv5