CVE-2019-3740

CWE-310CWE-203CWE-200 — Information Exposure9 documents4 sources
Severity
6.5MEDIUM
EPSS
1.2%
top 20.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
19
Dell Bsafe Crypto-jOracle Global Lifecycle Management OpatchOracle Goldengate+16 more
Timeline
PublishedSep 18
Latest updateMay 24

Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages19 packages

▶NVDdell/bsafe_crypto-j< 6.2.5
▶CVEListV5dell/rsa_bsafe_crypto-jprior to 6.2.5
▶NVDdell/bsafe_ssl-j6.2.4.1
▶NVDoracle/goldengate< 19.1.0.0.0.210420

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7mmw-x6rm-hmr8: RSA BSAFE Crypto-J versions prior to 6↗2022-05-24
▶
CVEList
CVE-2019-3740: RSA BSAFE Crypto-J versions prior to 6↗2019-09-18
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle Communications Applications Risk Matrix: Installer (RSA BSAFE Crypto-J) — CVE-2019-3740↗2022-04-15
▶
Oracle
Oracle Oracle GoldenGate Risk Matrix: Install (Dell BSAFE Crypto-J) — CVE-2019-3740↗2021-10-15
▶
Oracle
Oracle Oracle Communications Applications Risk Matrix: Inventory Organizer (BSAFE Crypto-J) — CVE-2019-3740↗2021-07-15
▶
Oracle
Oracle Oracle Database Server Risk Matrix: Oracle Database - Enterprise Edition (Dell BSAFE Crypto-J) — CVE-2019-3740↗2021-04-15
▶
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Comp Management and Life Cycle Management (RSA BSAFE Crypto-J) — CVE-2019-3740↗2020-10-15
▶