5.9
Medium
CVE-2018-11069 RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also…
Description
RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA BSAFE SSL-J 6.2 | earliest → < 6.2.4 | 6.2.4 |