CVE-2019-3740 in Oracle StorageTek ACSLSinfo

Summary

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Responsible

Dell

Reservation

01/03/2019

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
198194	Oracle StorageTek ACSLS Software information disclosure	200	Not defined	Official fix	CVE-2019-3740
197759	Oracle Communications Network Integrity Installer information disclosure	200	Not defined	Official fix	CVE-2019-3740
184649	Oracle GoldenGate Dell BSAFE Crypto-J information disclosure	200	Not defined	Official fix	CVE-2019-3740
179255	Oracle StorageTek Tape Analytics SW Tool BSAFE Crypto-J information disclosure	200	Not defined	Official fix	CVE-2019-3740
178988	Oracle Communications Unified Inventory Management BSAFE Crypto-J information disclosure	200	Not defined	Official fix	CVE-2019-3740
173657	Oracle Retail Predictive Application Server RPAS Server information disclosure	200	Not defined	Official fix	CVE-2019-3740
173520	Oracle WebLogic Server Core information disclosure	200	Not defined	Official fix	CVE-2019-3740
173338	Oracle Global Lifecycle Management OPatch Patch Installer (Dell BSAFE Crypto-J) information disclosure	200	Not defined	Official fix	CVE-2019-3740
173330	Oracle Database Oracle Database Enterprise Edition Security information disclosure	200	Not defined	Official fix	CVE-2019-3740
163340	Oracle Retail Xstore Point of Service Xenvironment information disclosure	200	Not defined	Official fix	CVE-2019-3740
163339	Oracle Retail Service Backbone RSB kernel information disclosure	200	Not defined	Official fix	CVE-2019-3740
163338	Oracle Retail Predictive Application Server RPAS Server information disclosure	200	Not defined	Official fix	CVE-2019-3740
163337	Oracle Retail Integration Bus RIB Kernal information disclosure	200	Not defined	Official fix	CVE-2019-3740
163336	Oracle Retail Assortment Planning Application Core information disclosure	200	Not defined	Official fix	CVE-2019-3740
163111	Oracle Application Performance Management (APM) Comp Management/Life Cycle Management information disclosure	200	Not defined	Official fix	CVE-2019-3740
158444	Oracle Retail Store Inventory Management SIM Integration information disclosure	200	Not defined	Official fix	CVE-2019-3740
141980	RSA BSAFE Crypto-J DAS Key Generation information disclosure	200	Not defined	Official fix	CVE-2019-3740

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!