PT-2019-16677 · Rsa · Rsa Bsafe Crypto-C Micro Edition

Publicado 2019-09-30 · Atualizado 2022-04-12 · CVE-2019-3733

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4

Description The issue is related to an Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. This could allow a malicious remote user to extract information, putting data at risk of exposure.

Recommendations For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Correção

Enumeração de Fraquezas

CWE-316

CWE-459

Identificadores relacionados

CVE-2019-3733

Produtos afetados

Rsa Bsafe Crypto-C Micro Edition

Referências · 5

• https://t.me/cvenotify/24471 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-3733 · Nota de Segurança
• https://dell.com/support/kbdoc/000194054 · Aviso do Fabricante
• https://t.me/cvenotify/23978 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-3733 · Aviso do Fabricante