NetSight
IP …
medium6.5

CVE-2019-3740

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation.

Impact

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Affected products

VendorProductAffected versions
DellBsafe Cert-J
through 6.2.4
DellBsafe Crypto-J
before 6.2.5
DellBsafe Ssl-J
through 6.2.4.1
OracleApplication Performance Management
Versions 13.3.0.0, 13.4.0.0
OracleCommunications Network Integrity
Versions 7.3.2, 7.3.5, 7.3.6
OracleCommunications Unified Inventory Management
Versions 7.3.2, 7.3.4, 7.3.5, 7.4.0, 7.4.1
OracleDatabase
Versions 12.1.0.2, 12.2.0.1, 18c, 19c
OracleGlobal Lifecycle Management Opatch
before 12.2.0.1.22
OracleGoldengate
before 19.1.0.0.0.210420
OracleRetail Assortment Planning
Versions 15.0.3.0, 16.0.3.0
OracleRetail Integration Bus
Versions 14.1, 15.0, 16.0
OracleRetail Predictive Application Server
Versions 14.1.3.0, 15.0, 15.0.3.0, 16.0.3.0

Weakness classification

CWE-310CWE-203

References