Security Advisory
CVE-2018-18326
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.