CVE-2019-3738
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2019-09-18
- Last modified
- 2024-09-16
- Weaknesses
- CWE-325, CWE-347
Affected products
- Bsafe Cert-j (Dell)
- Bsafe Crypto-j (Dell)
- Bsafe Ssl-j (Dell)
- Rsa Bsafe Crypto-j (Dell)
- Threat Intelligence Exchange Server (Mcafee)
- Application Performance Management (Oracle)
- Communications Network Integrity (Oracle)
- Communications Unified Inventory Management (Oracle)
- Database (Oracle)
- Goldengate (Oracle)
- Retail Assortment Planning (Oracle)
- Retail Integration Bus (Oracle)
- Retail Predictive Application Server (Oracle)
- Retail Service Backbone (Oracle)
- Retail Store Inventory Management (Oracle)
- Retail Xstore Point Of Service (Oracle)
- Storagetek Tape Analytics Sw Tool (Oracle)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10318
- https://www.dell.com/support/security/en-us/details/DOC-106556/DSA-2019-094-RSA-BSAFE®%3B-Crypto-J-Multiple-Securit…
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
