GHSA-xx3h-j3cx-8qfj

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/07/GHSA-xx3h-j3cx-8qfj/GHSA-xx3h-j3cx-8qfj.json
Aliases
  • CVE-2018-18326
Published
2019-07-05T21:08:20Z
Modified
2022-11-22T01:03:08.358683Z
Details

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.

References

Affected packages

NuGet / DotNetNuke.Core

DotNetNuke.Core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
9.3.0

Affected versions

6.*

6.0.0

7.*

7.0.0
7.0.6.121
7.1.0
7.1.2
7.2.0.613
7.3.0.499
7.3.1.20
7.4.0.353
7.4.1.280
7.4.2.216

8.*

8.0.0.809
8.0.1.239
8.0.2.4
8.0.3.5
8.0.4.226

9.*

9.0.0.1002
9.0.1.142
9.1.0.367
9.1.1.129
9.2.0.366
9.2.1.533