Information disclosure

2019-09-1823:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

CPENameOperatorVersion
bsafe_cert-jle6.2.4
bsafe_crypto-jlt6.2.5
bsafe_ssl-jle6.2.4.1
application_performance_managementeq13.3.0.0
application_performance_managementeq13.4.0.0
communications_network_integrityeq7.3.5
communications_network_integrityeq7.3.6
communications_network_integrityeq7.3.2
communications_unified_inventory_managementeq7.3.2
communications_unified_inventory_managementeq7.3.4

Name	Operator	Version
bsafe_cert-j	le	6.2.4
bsafe_crypto-j	lt	6.2.5
bsafe_ssl-j	le	6.2.4.1
application_performance_management	eq	13.3.0.0
application_performance_management	eq	13.4.0.0
communications_network_integrity	eq	7.3.5
communications_network_integrity	eq	7.3.6
communications_network_integrity	eq	7.3.2
communications_unified_inventory_management	eq	7.3.2
communications_unified_inventory_management	eq	7.3.4