Orta CVSS 6.5
CVE-2019-3739: Bsafe Cert-j: güvenlik açığı
Açıklama (NVD)
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Özet bilgiler
- Ürün
- Dell Bsafe Cert-j
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- %2,63 (yüzdelik 86)
- CWE
- CWE-310
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dell-bsafe-cert-j | — | 6.2.4 | — |
| dell-bsafe-crypto-j | — | — | 6.2.5 |
| dell-bsafe-ssl-j | — | 6.2.4.1 | — |
| oracle-application-performance-management | 13.3.0.0 | 13.3.0.0 | — |
| oracle-application-performance-management | 13.4.0.0 | 13.4.0.0 | — |
| oracle-communications-network-integrity | 7.3.2 | 7.3.2 | — |
| oracle-communications-network-integrity | 7.3.5 | 7.3.5 | — |
| oracle-communications-network-integrity | 7.3.6 | 7.3.6 | — |
| oracle-database | 12.1.0.2 | 12.1.0.2 | — |
| oracle-database | 12.2.0.1 | 12.2.0.1 | — |
| oracle-database | 18c | 18c | — |
| oracle-database | 19c | 19c | — |
| oracle-goldengate | — | — | 19.1.0.0.0.210420 |
| oracle-retail-assortment-planning | 15.0.3.0 | 15.0.3.0 | — |
| oracle-retail-assortment-planning | 16.0.3.0 | 16.0.3.0 | — |
| oracle-retail-integration-bus | 14.1 | 14.1 | — |
| oracle-retail-integration-bus | 15.0 | 15.0 | — |
| oracle-retail-integration-bus | 16.0 | 16.0 | — |
| oracle-retail-predictive-application-server | 14.1.3.0 | 14.1.3.0 | — |
| oracle-retail-predictive-application-server | 15.0.3.0 | 15.0.3.0 | — |
| oracle-retail-predictive-application-server | 16.0.3.0 | 16.0.3.0 | — |
| oracle-retail-service-backbone | 14.1 | 14.1 | — |
| oracle-retail-service-backbone | 15.0 | 15.0 | — |
| oracle-retail-service-backbone | 16.0 | 16.0 | — |
| oracle-retail-store-inventory-management | 14.0.4 | 14.0.4 | — |
| oracle-retail-store-inventory-management | 14.1.3 | 14.1.3 | — |
| oracle-retail-store-inventory-management | 15.0.3 | 15.0.3 | — |
| oracle-retail-store-inventory-management | 16.0.3 | 16.0.3 | — |
| oracle-retail-xstore-point-of-service | 15.0.3 | 15.0.3 | — |
| oracle-retail-xstore-point-of-service | 16.0.5 | 16.0.5 | — |