Cybersecurity Alerts

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-326

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-15811