CVE-2019-15075

2020-03-2018:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.7%

JSON

An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have strong random keys, as demonstrated by use of the 8YSDaBtDHAB3EQkxPAyTz2I5DttzA9uR private key and the r)fddEw232f encryption key.

CPENameOperatorVersion
astppeq3.0
astppeq3.0.1
astppeq3.0-beta

Name	Operator	Version
astpp	eq	3.0
astpp	eq	3.0.1
astpp	eq	3.0-beta

References

github.com/iNextrix/ASTPP/commit/9877ec62556f0470030acd306b24bc94fdcbe2ae