CVE

CVE-2018-18325

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) · DotNetNuke (DNN)

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.

Source: NVD ↗ · CISA KEV Catalog ↗