Orta CVSS 6.5
CVE-2019-3740: Bsafe Cert-j: güvenlik açığı
Açıklama (NVD)
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
Özet bilgiler
- Ürün
- Dell Bsafe Cert-j
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- %3,89 (yüzdelik 90)
- CWE
- CWE-310
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dell-bsafe-cert-j | — | 6.2.4 | — |
| dell-bsafe-crypto-j | — | — | 6.2.5 |
| dell-bsafe-ssl-j | — | 6.2.4.1 | — |
| oracle-application-performance-management | 13.3.0.0 | 13.3.0.0 | — |
| oracle-application-performance-management | 13.4.0.0 | 13.4.0.0 | — |
| oracle-communications-network-integrity | 7.3.2 | 7.3.2 | — |
| oracle-communications-network-integrity | 7.3.5 | 7.3.5 | — |
| oracle-communications-network-integrity | 7.3.6 | 7.3.6 | — |
| oracle-communications-unified-inventory-management | 7.3.2 | 7.3.2 | — |
| oracle-communications-unified-inventory-management | 7.3.4 | 7.3.4 | — |
| oracle-communications-unified-inventory-management | 7.3.5 | 7.3.5 | — |
| oracle-communications-unified-inventory-management | 7.4.0 | 7.4.0 | — |
| oracle-communications-unified-inventory-management | 7.4.1 | 7.4.1 | — |
| oracle-database | 12.1.0.2 | 12.1.0.2 | — |
| oracle-database | 12.2.0.1 | 12.2.0.1 | — |
| oracle-database | 18c | 18c | — |
| oracle-database | 19c | 19c | — |
| oracle-global-lifecycle-management-opatch | — | — | 12.2.0.1.22 |
| oracle-goldengate | — | — | 19.1.0.0.0.210420 |
| oracle-retail-assortment-planning | 15.0.3.0 | 15.0.3.0 | — |
| oracle-retail-assortment-planning | 16.0.3.0 | 16.0.3.0 | — |
| oracle-retail-integration-bus | 14.1 | 14.1 | — |
| oracle-retail-integration-bus | 15.0 | 15.0 | — |
| oracle-retail-integration-bus | 16.0 | 16.0 | — |
| oracle-retail-predictive-application-server | 14.1.3.0 | 14.1.3.0 | — |
| oracle-retail-predictive-application-server | 15.0 | 15.0 | — |
| oracle-retail-predictive-application-server | 15.0.3.0 | 15.0.3.0 | — |
| oracle-retail-predictive-application-server | 16.0.3.0 | 16.0.3.0 | — |
| oracle-retail-service-backbone | 14.1 | 14.1 | — |
| oracle-retail-service-backbone | 15.0 | 15.0 | — |