PT-2019-16676 · Rsa · Rsa Bsafe Crypto-C Micro Edition+1

Publicado 2019-09-30 · Atualizado 2022-04-12 · CVE-2019-3732

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.3.3 RSA Micro Edition Suite versions prior to 4.0.11 RSA Micro Edition Suite versions prior to 4.1.6.1 RSA Micro Edition Suite versions prior to 4.3.3

Description The issue is related to an Information Exposure Through Timing Discrepancy, which could allow a malicious remote user to extract information, putting data at risk of exposure.

Recommendations For RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3, update to version 4.0.5.3 or later. For RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.3.3, update to version 4.1.3.3 or later. For RSA Micro Edition Suite versions prior to 4.0.11, update to version 4.0.11 or later. For RSA Micro Edition Suite versions prior to 4.1.6.1, update to version 4.1.6.1 or later. For RSA Micro Edition Suite versions prior to 4.3.3, update to version 4.3.3 or later.

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-385

CWE-203

Identificadores relacionados

CVE-2019-3732

Produtos afetados

Rsa Bsafe Crypto-C Micro Edition

Rsa Micro Edition Suite

Referências · 4

• https://dell.com/support/kbdoc/000194054 · Aviso do Fabricante
• https://t.me/cvenotify/24477 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-3732 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3732 · Nota de Segurança