CVE-2014-4193 in RSA BSAFE-Java Toolkits
Summary
The TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended Random extension during use of the Dual_EC_DRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by requesting long nonces from a server, a different issue than CVE-2007-6755.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
06/17/2014
Disclosure
06/17/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70076 | EMC RSA BSAFE-Java Toolkits Session cryptographic issue | 310 | Not defined | Not defined | CVE-2014-4193 |