high7.5
CVE-2019-15075
An issue was discovered in iNextrix ASTPP before 4.0.1.
Impact
An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have strong random keys, as demonstrated by use of the 8YSDaBtDHAB3EQkxPAyTz2I5DttzA9uR private key and the r)fddEw232f encryption key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inextrix | Astpp | before 4.0.1 |