DNN.Platform NTLM Hash Leakage Vulnerability via SMB Interaction
Vulnerability
A vulnerability in DNN.Platform (formerly DotNetNuke) versions 6.0.0 prior to 10.0.1 allows a specially crafted series of interactions to potentially expose NTLM hashes to a third-party SMB server. This issue has been patched in version 10.0.1.
Impact
Exploitation of this vulnerability can lead to the unauthorized exposure of NTLM hashes, which could be used in NTLM relay attacks or to crack the hashes and obtain user credentials.
Remediation
Users can upgrade to DNN.Platform version 10.0.1 or later to address this vulnerability.
Added: Jun 21, 2025, 3:31 AM
Updated: Jun 21, 2025, 3:31 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
0.2threat
0.6urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.