VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026

CVE-2019-3740

CVE-2019-3740

Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Affected products

50
  • Dell/Bsafe Cert J
    cpe:2.3:a:dell:bsafe_cert-j:*:*:*:*:*:*:*:*
    Range: <=6.2.4
  • Dell/Bsafe Crypto J3 versions
    cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*range: <6.2.5
    • (no CPE)range: <6.2.5
    • (no CPE)range: prior to 6.2.5
  • Dell/Bsafe SSL J
    cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*
    Range: <=6.2.4.1
  • Oracle Corporation/Application Performance Management2 versions
    cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_performance_management:13.4.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Network Integrity3 versions
    cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Unified Inventory Management5 versions
    cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*
  • Oracle Corporation/Database 9i4 versions
    cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*+ 3 more
    • cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*
  • Oracle Corporation/Global Lifecycle Management Opatch
    cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
    Range: <12.2.0.1.22
  • Oracle Corporation/Goldengate
    cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
    Range: <19.1.0.0.0.210420
  • Oracle Corporation/Retail Assortment Planning2 versions
    cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Integration Bus3 versions
    cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Predictive Application Server4 versions
    cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_predictive_application_server:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Service Backbone3 versions
    cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Store Inventory Management4 versions
    cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Xstore Point Of Service5 versions
    cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.1:*:*:*:*:*:*:*
  • Oracle Corporation/Storagetek Acsls
    cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:*
  • Oracle Corporation/Storagetek Tape Analytics Sw Tool
    cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:*
  • Oracle Corporation/Weblogic Server5 versions
    cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
  • Rsa/BSAFE Crypto-Jllm-fuzzy
    Range: <6.2.5

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.