PT-2019-16675 · Rsa · Rsa Bsafe Crypto-C Micro Edition+1

Publicado 2019-09-30 · Atualizado 2022-04-12 · CVE-2019-3731

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 RSA Micro Edition Suite versions prior to 4.4

Description The issue is related to an Information Exposure Through Timing Discrepancy, which could be exploited by a malicious remote user to extract information, potentially leaving data at risk of exposure.

Recommendations For RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4, update to version 4.1.4 or later. For RSA Micro Edition Suite versions prior to 4.4, update to version 4.4 or later.

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-310

CWE-203

Identificadores relacionados

CVE-2019-3731

Produtos afetados

Rsa Bsafe Crypto-C Micro Edition

Rsa Micro Edition Suite

Referências · 5

• https://dell.com/support/kbdoc/000194054 · Aviso do Fabricante
• https://t.me/cvenotify/24478 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-3731 · Nota de Segurança
• https://t.me/cvenotify/23980 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-3731 · Aviso do Fabricante