The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information.
References
Configurations
Configuration 1 (hide)
|
History
24 Apr 2026, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dnnsoftware dotnetnuke
Dnnsoftware |
|
| CPE | cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.4:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.3:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:5.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:5.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:* |
cpe:2.3:a:dnnsoftware:dotnetnuke:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.2:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.3:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.9:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.1.4:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.4:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.0:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.3.5:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.7.0:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.0:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.1.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.0:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.5:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.4:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.9.2:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.1.3:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.0:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.2:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.9.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:dnnsoftware:dotnetnuke:5.1.2:*:*:*:*:*:*:* |
21 Nov 2024, 01:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/60520 - | |
| References | () http://secunia.com/advisories/37480 - Vendor Advisory | |
| References | () http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno30/tabid/1449/Default.aspx - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/37139 - |
Information
Published : 2009-11-29 13:08
Updated : 2026-04-24 17:34
NVD link : CVE-2009-4109
Mitre link : CVE-2009-4109
CVE.ORG link : CVE-2009-4109
JSON object : View
Products Affected
dnnsoftware
- dotnetnuke
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor