CVE-2016-8212

An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpda...

PT-2017-9536

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Crypto-J versions prior to 6.2.2 Description The issue allows for a possible timing attack by modifying a PKCS12 file with an unknown password, enabling an attacker to guess the current MAC one byte at a time. This is due to the...

CVE-2016-8212: Improper Resource Shutdown or Release

An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpda...

PT-2017-9531

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Crypto-J versions prior to 6.2.2 Description The issue is related to an improper OCSP validation. OCSP responses contain two time values: thisUpdate and nextUpdate, which specify a validity period. However, both values are...

CVE-2016-8217: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS12 file to the toolkit and...