CVE-2018-15811—DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

漏洞名称

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

描述

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2018-15811

相关 CWE

• CWE-326