CVE-2019-3733CWE-316

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release…

Medium · published September 30, 2019

CVSS v3.0
4.4
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.

The record
Technical detail
CVSS v3.0
4.4 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00600 · 47.8th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2019-09-30T21:48Z
EPSS history
Timeline
  • 30 SEP 21:48Z
    RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release…
    cvelistv5