Medium · published September 19, 2019
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
| Product | Versions | Fixed in |
|---|---|---|
| dell/bsafe_cert-j | ≤ 6.2.4 | — |
| dell/bsafe_crypto-j | < 6.2.5 | 6.2.5 |
| dell/bsafe_ssl-j | ≤ 6.2.4.1 | — |
| oracle/application_performance_management | all versions | — |
| oracle/application_performance_management | all versions | — |
| oracle/communications_network_integrity | all versions | — |
| oracle/communications_network_integrity | all versions | — |
| oracle/communications_network_integrity | all versions | — |
| oracle/database | all versions | — |
| oracle/database | all versions | — |
| oracle/database | all versions | — |
| oracle/database | all versions | — |
| oracle/goldengate | < 19.1.0.0.0.210420 | 19.1.0.0.0.210420 |
| oracle/retail_assortment_planning | all versions | — |
| oracle/retail_assortment_planning | all versions | — |
| oracle/retail_integration_bus | all versions | — |
| oracle/retail_integration_bus | all versions | — |
| oracle/retail_integration_bus | all versions | — |
| oracle/retail_predictive_application_server | all versions | — |
| oracle/retail_predictive_application_server | all versions | — |
| oracle/retail_predictive_application_server | all versions | — |
| oracle/retail_service_backbone | all versions | — |
| oracle/retail_service_backbone | all versions | — |
| oracle/retail_service_backbone | all versions | — |
| oracle/retail_store_inventory_management | all versions | — |
| oracle/retail_store_inventory_management | all versions | — |
| oracle/retail_store_inventory_management | all versions | — |
| oracle/retail_store_inventory_management | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/storagetek_acsls | all versions | — |
| oracle/storagetek_tape_analytics_sw_tool | all versions | — |
| oracle/weblogic_server | all versions | — |
| oracle/weblogic_server | all versions | — |
| oracle/weblogic_server | all versions | — |
| oracle/weblogic_server | all versions | — |