CVE-2019-15075

—

CVSS 3.1

7.5 high

EPSS

<1%p36

Published

Mar 20, 2020 (Mar 20, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have strong random keys, as demonstrated by use of the 8YSDaBtDHAB3EQkxPAyTz2I5DttzA9uR private key and the r)fddEw232f encryption key.

Vendors: inextrix
Products: astpp
Weakness: CWE-327, CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.