CVE-2018-11057
—CVSS 3.1
5.9 medium
EPSS
2%p75
Published
()
Modified
Description
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
- Vendors
- delloracle
- Products
- bsafe, application testing suite, communications analytics, communications ip service activator, core rdbms, enterprise manager ops center, goldengate application adapters, jd edwards enterpriseone tools, real user experience insight, retail predictive application server, security service, timesten in-memory database
- Weakness
- CWE-327
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.