NetSight
IP …
medium6.5

CVE-2019-3739

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation.

Impact

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

Affected products

VendorProductAffected versions
DellBsafe Cert-J
through 6.2.4
DellBsafe Crypto-J
before 6.2.5
DellBsafe Ssl-J
through 6.2.4.1
OracleApplication Performance Management
Versions 13.3.0.0, 13.4.0.0
OracleCommunications Network Integrity
Versions 7.3.2, 7.3.5, 7.3.6
OracleDatabase
Versions 12.1.0.2, 12.2.0.1, 18c, 19c
OracleGoldengate
before 19.1.0.0.0.210420
OracleRetail Assortment Planning
Versions 15.0.3.0, 16.0.3.0
OracleRetail Integration Bus
Versions 14.1, 15.0, 16.0
OracleRetail Predictive Application Server
Versions 14.1.3.0, 15.0.3.0, 16.0.3.0
OracleRetail Service Backbone
Versions 14.1, 15.0, 16.0
OracleRetail Store Inventory Management
Versions 14.0.4, 14.1.3, 15.0.3, 16.0.3

Weakness classification

CWE-310CWE-203

References