Skip to content
Sign in
6.5 Medium

CVE-2019-3739 RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy…

Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

Affected products and versions

Product Affected versions Fixed in
RSA BSAFE Crypto-J Versions not published

Other CVEs of RSA BSAFE Crypto-J

The 3 CVEs of RSA BSAFE Crypto-J →
CVE-2019-3738 RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability 6.5 Medium CVE-2019-3740 RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy… 6.5 Medium
Track this CVE