Vulnerabilities for Bsafe ssl-j (...) - CXSECURITY.COM

Vulnerabilities for 'Bsafe ssl-j'

2019-09-18

CVE-2019-3740

CWE-200

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

CVE-2019-3739

CWE-203

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

CVE-2019-3738

CWE-347

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.

>>> Vendor: RSA 39 Products

Bsafe ssl-j sdk

Authentication agent for web

Securid web agent

Keon certificate authority manager

Authentication manager

Keon registration authority web interface

Authentication agent

Adaptive authentication

Federated identity manager

Access manager agent

Access manager server

Authentication client

Securid software token converter

Securid appliance

Authentication agent for windows

Authentication api

Pluggable authentication module

Pluggable authentication module agent

Bsafe crypto-c me

Bsafe crypto-c me mfp psos

Bsafe crypto-c me mfp vxworks

Bsafe crypto-j jsafe and jce

Adaptive authentication (on premise)

Identity management and governance

Governance and lifecycle

Lifecycle and governance

Archer grc platform

Bsafe ssl-j

Copyright 2024, cxsecurity.com