{"id":"CVE-2018-18326","published":"2019-07-03T16:39:12Z","modified":"2024-08-05T11:08:21Z","title":"DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.54267,"percentile":0.99009,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://github.com/dnnsoftware/Dnn.Platform/releases","tags":["x_refsource_MISC"]},{"url":"https://www.dnnsoftware.com/community/security/security-center","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<9.3.0"],"patched":["9.3.0"],"from":["GHSA-xx3h-j3cx-8qfj"],"provenance":"source"}],"advisories":[{"id":"GHSA-xx3h-j3cx-8qfj","url":"https://github.com/advisories/GHSA-xx3h-j3cx-8qfj","severity":"HIGH","ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<9.3.0"],"patched":["9.3.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2019-0612","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0612","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":48336,"url":"https://www.exploit-db.com/exploits/48336","title":"DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2020-04-16","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2020-04-16"},"metasploit":[{"name":"DotNetNuke Cookie Deserialization Remote Code Excecution","module":"exploit/windows/http/dnn_cookie_deserialization_rce","type":"exploit","disclosureDate":"2017-07-20","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb"}],"first":{"date":"2017-07-20","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html"],"flow":[],"timeline":[{"date":"2017-07-20","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2020-04-16","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb","provenance":"source"},{"date":"2019-07-03","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-18326","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.8,"detail":"percentile 0.9901"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-dotnetnuke-core-cve-2018-15812","parents":[{"from":"CVE-2018-15812","to":"CVE-2018-18326","relation":"incomplete-fix","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.","from":"CVE.org","in":"CVE-2018-18326"},{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"9.2.2","toFixed":"9.3.0","daysApart":0},{"kind":"similar","provenance":"machine","score":0.93,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2018-15811","published":"2019-07-03","fixed":"9.2.2","kev":true},{"cve":"CVE-2018-15812","published":"2019-07-03","fixed":"9.2.2","kev":false},{"cve":"CVE-2018-18325","published":"2019-07-03","fixed":"9.3.0","kev":true},{"cve":"CVE-2018-18326","published":"2019-07-03","fixed":"9.3.0","kev":false},{"cve":"CVE-2019-12562","published":"2019-09-26","fixed":"9.4.0","kev":false},{"cve":"CVE-2020-5187","published":"2020-02-24","fixed":"9.5.0","kev":false},{"cve":"CVE-2022-2922","published":"2022-09-30","fixed":"9.11.0","kev":false}],"package":"NuGet:DotNetNuke.Core"}}