← לוח פגיעויות

CVE-2019-3739

בינונית 6.5

תיאור (מקור, אנגלית)

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

מדדים

CVSS 3.1
6.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS — סבירות ניצול
3% (אחוזון 100) נכון ל-14/10/2026
CWE
CWE-310, CWE-203

מוצרים מושפעים

dell: bsafe cert-j; dell: bsafe crypto-j; dell: bsafe ssl-j; oracle: application performance management; oracle: communications network integrity; oracle: database; oracle: goldengate; oracle: retail assortment planning; oracle: retail integration bus; oracle: retail predictive application server; oracle: retail service backbone; oracle: retail store inventory management; oracle: retail xstore point of service; oracle: storagetek acsls; oracle: storagetek tape analytics sw tool

קישורים