CVE-2019-15075

CVE-2019-15075 affects iNextrix ASTPP prior to 4.0.1. The issue is in web_interface/astpp/application/config/config.php, which does not use strong random keys, as demonstrated by the use of a private key and an encryption key in the example. The connected sources corroborate the weak-key configur...