NetSight
IP …
medium6.5

CVE-2019-3738

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability.

Impact

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.

Affected products

VendorProductAffected versions
DellBsafe Cert-J
through 6.2.4
DellBsafe Crypto-J
before 6.2.5
DellBsafe Ssl-J
through 6.2.4.1
McafeeThreat Intelligence Exchange Server
from 2.0.0 through 2.3.1
Version 3.0.0
OracleApplication Performance Management
Versions 13.3.0.0, 13.4.0.0
OracleCommunications Network Integrity
Versions 7.3.2, 7.3.5, 7.3.6
OracleCommunications Unified Inventory Management
Versions 7.3.2, 7.3.4, 7.3.5, 7.4.0, 7.4.1
OracleDatabase
Versions 12.1.0.2, 12.2.0.1, 18c, 19c
OracleGoldengate
before 19.1.0.0.0.210420
Version 19.1.0.0.0.210420
OracleRetail Assortment Planning
Versions 15.0.3.0, 16.0.3.0
OracleRetail Integration Bus
Versions 14.1, 15.0, 16.0
OracleRetail Predictive Application Server
Versions 14.1.3.0, 15.0.3.0, 16.0.3.0

Weakness classification

CWE-325CWE-347

References