Vulnerabilities

TI-2018-07843 CVE-2018-11057 · GHSA-fg5g-qjmw-2fv3

Broken or risky cryptographic algorithm in RSA BSAFE Micro Edition Suite

LOW 30

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryp…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01666 Published 2018-08-31 Fixed in 4.0.11, 4.1.6.1 CWE-327

TI-2018-07841 CVE-2018-11055 · GHSA-7mh8-r5jc-g27h

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1…

LOW 25

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00426 Published 2018-08-31 Fixed in 4.0.11, 4.1.6.1 CWE-404

Vulnerabilities

Filters

Broken or risky cryptographic algorithm in RSA BSAFE Micro Edition Suite

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1…