CVE-2020-35166

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2022-07-11

Last modified

2024-09-17

Weaknesses

CWE-385

Affected products

• Bsafe Crypto-c-micro-edition (Dell)
• Bsafe Crypto-c Micro Edition (Dell)
• Bsafe Micro-edition-suite (Dell)
• Dell Bsafe Micro Edition Suite (Dell)
• Database (Oracle)
• Http Server (Oracle)
• Security Service (Oracle)
• Weblogic Server Proxy Plug-in (Oracle)

References

• https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-…