Information Disclosure

🗓️ 04 Jul 2019 03:23:34Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 48 Views

Dnn.Platform vulnerability, weak encryptio

Reporter	Title	Published	Views	Family All 40
0day.today	DotNetNuke Cookie Deserialization Remote Code Execution Exploit	3 Apr 202000:00	–	zdt
ATTACKERKB	CVE-2018-15811	3 Jul 201900:00	–	attackerkb
ATTACKERKB	CVE-2018-18325	3 Jul 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.	1 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.	1 Dec 202100:00	–	bdu_fstec
Circl	CVE-2018-15811	2 Apr 202015:06	–	circl
Circl	CVE-2018-18325	2 Apr 202015:06	–	circl
CISA KEV Catalog	DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA KEV Catalog	DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability	3 Nov 202100:00	–	cisa_kev
Check Point Advisories	Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811)	16 Dec 202100:00	–	checkpoint_advisories

Vulners

Node

OR

dnn.platform dnn.platformMatch9.2.0csharp

dotnetnuke.core dotnetnuke.coreMatch9.2.0.366csharp

dotnetnuke.core dotnetnuke.coreMatch9.2.1.533csharp

Source	Link
sourceclear	www.sourceclear.com/vulnerability-database/vulnerabilities/20651
dnnsoftware	www.dnnsoftware.com/community/security/security-center
github	www.github.com/dnnsoftware/Dnn.Platform/releases
packetstormsecurity	www.packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html

07 Mar 2025 15:22Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5

EPSS0.74048

information disclosure vulnerability weak encryption algorithm