Information Exposure Vulnerabilities in RSA BSAFE Crypto-J by Oracle
CVE-2019-3740

6.5MEDIUM

Key Information:

Vendor
Dell
Status
Rsa Bsafe Crypto-j
Vendor
CVE Published:
18 September 2019

Summary

RSA BSAFE Crypto-J prior to version 6.2.5 is susceptible to vulnerabilities that expose sensitive information through timing discrepancies during the DSA key generation process. An attacker could exploit these weaknesses remotely to potentially recover DSA keys, posing a significant security risk. Organizations using these affected versions should take immediate action to update to the latest secure versions to mitigate potential threats.

Affected Version(s)

RSA BSAFE Crypto-J prior to 6.2.5

References

https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISC
https://www.dell.com/support/security/en-us/details/DOC-1...
x_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2020.html
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.