Covert Timing Channel Vulnerability in RSA BSAFE SSL-J by RSA Security

CVE-2018-11069

Summary

RSA BSAFE SSL-J versions earlier than 6.2.4 are susceptible to a Covert Timing Channel vulnerability during the RSA decryption process. This vulnerability, often associated with the Bleichenbacher attack, could potentially allow a remote attacker to extract the RSA key, threatening the confidentiality and integrity of secured communications. Ensuring that systems are updated to the latest version is critical to safeguarding against potential exploits.

References