Covert Timing Channel Vulnerability in Dell BSAFE SSL-J
CVE-2022-24409

5.9MEDIUM

Key Information:

Vendor
Dell
Status
Dell Bsafe Ssl-j
Vendor
CVE Published:
23 February 2022

Summary

Dell BSAFE SSL-J has a covert timing channel vulnerability that malicious users could exploit to compromise the security of the affected system. This issue underscores the importance of maintaining updated software and being aware of vulnerability management practices. Only users with active BSAFE maintenance contracts can access detailed vulnerability information.

Affected Version(s)

Dell BSAFE SSL-J 5.1

Dell BSAFE SSL-J < 6.4

References

https://www.dell.com/support/kbdoc/en-us/000196312/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.