Dnnsoftware: >> Dotnetnuke >> 9.2.0 Security Vulnerabilities
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
CVSS Score
7.5
EPSS Score
0.765
Published
2019-07-03
Page 3