VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026

CVE-2019-3738

CVE-2019-3738

Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.

Affected products

44
  • Dell/Bsafe Cert J
    cpe:2.3:a:dell:bsafe_cert-j:*:*:*:*:*:*:*:*
    Range: <=6.2.4
  • Dell/Bsafe Crypto J2 versions
    cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*range: <6.2.5
    • (no CPE)range: prior to 6.2.5
  • Dell/Bsafe SSL J
    cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*
    Range: <=6.2.4.1
  • McAfee/Threat Intelligence Exchange Server2 versions
    cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*range: >=2.0.0,<=2.3.1
    • cpe:2.3:a:mcafee:threat_intelligence_exchange_server:3.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Application Performance Management2 versions
    cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_performance_management:13.4.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Network Integrity3 versions
    cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Unified Inventory Management5 versions
    cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*
  • Oracle Corporation/Database 9i4 versions
    cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*+ 3 more
    • cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*
  • Oracle Corporation/Goldengate2 versions
    cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*range: <19.1.0.0.0.210420
    • cpe:2.3:a:oracle:goldengate:19.1.0.0.0.210420:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Assortment Planning2 versions
    cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Integration Bus3 versions
    cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Predictive Application Server3 versions
    cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Service Backbone3 versions
    cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Store Inventory Management4 versions
    cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Xstore Point Of Service5 versions
    cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.1:*:*:*:*:*:*:*
  • Oracle Corporation/Storagetek Tape Analytics Sw Tool
    cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:*
  • Rsa/BSAFE Crypto-Jllm-fuzzy
    Range: <6.2.5

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.