CVE-2019-3739 (CNNVD-201909-880)
MEDIUM
中文标题:
Dell RSA BSAFE Crypto-J 加密问题漏洞
英文标题:
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Dis...
CVSS分数:
6.5
发布时间:
2019-09-18 22:23:10
漏洞类型:
加密问题
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Dell RSA BSAFE Crypto-J是美国戴尔（Dell）公司的一个加密工具包，它可以为开发人员提供向其应用程序添加隐私和身份验证功能的工具。 Dell RSA BSAFE Crypto-J 6.2.5之前版本中存在安全漏洞。远程攻击者可利用该漏洞恢复DSA密钥。
英文描述:
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
CWE类型:
CWE-203
CWE-310
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Dell | RSA BSAFE Crypto-J | prior to 6.2.5 | - | - |
cpe:2.3:a:dell:rsa_bsafe_crypto-j:prior_to_6.2.5:*:*:*:*:*:*:*
|
| dell | bsafe_cert-j | * | - | - |
cpe:2.3:a:dell:bsafe_cert-j:*:*:*:*:*:*:*:*
|
| dell | bsafe_crypto-j | * | - | - |
cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*
|
| dell | bsafe_ssl-j | * | - | - |
cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*
|
| oracle | application_performance_management | 13.3.0.0 | - | - |
cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*
|
| oracle | application_performance_management | 13.4.0.0 | - | - |
cpe:2.3:a:oracle:application_performance_management:13.4.0.0:*:*:*:*:*:*:*
|
| oracle | communications_network_integrity | 7.3.2 | - | - |
cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*
|
| oracle | communications_network_integrity | 7.3.5 | - | - |
cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*
|
| oracle | communications_network_integrity | 7.3.6 | - | - |
cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*
|
| oracle | database | 12.1.0.2 | - | - |
cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*
|
| oracle | database | 12.2.0.1 | - | - |
cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*
|
| oracle | database | 18c | - | - |
cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*
|
| oracle | database | 19c | - | - |
cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*
|
| oracle | goldengate | * | - | - |
cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
|
| oracle | retail_assortment_planning | 15.0.3.0 | - | - |
cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*
|
| oracle | retail_assortment_planning | 16.0.3.0 | - | - |
cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*
|
| oracle | retail_integration_bus | 14.1 | - | - |
cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*
|
| oracle | retail_integration_bus | 15.0 | - | - |
cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*
|
| oracle | retail_integration_bus | 16.0 | - | - |
cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*
|
| oracle | retail_predictive_application_server | 14.1.3.0 | - | - |
cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*
|
| oracle | retail_predictive_application_server | 15.0.3.0 | - | - |
cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.0:*:*:*:*:*:*:*
|
| oracle | retail_predictive_application_server | 16.0.3.0 | - | - |
cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*
|
| oracle | retail_service_backbone | 14.1 | - | - |
cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*
|
| oracle | retail_service_backbone | 15.0 | - | - |
cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*
|
| oracle | retail_service_backbone | 16.0 | - | - |
cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*
|
| oracle | retail_store_inventory_management | 14.0.4 | - | - |
cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*
|
| oracle | retail_store_inventory_management | 14.1.3 | - | - |
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*
|
| oracle | retail_store_inventory_management | 15.0.3 | - | - |
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3:*:*:*:*:*:*:*
|
| oracle | retail_store_inventory_management | 16.0.3 | - | - |
cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3:*:*:*:*:*:*:*
|
| oracle | retail_xstore_point_of_service | 15.0.3 | - | - |
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*
|
| oracle | retail_xstore_point_of_service | 16.0.5 | - | - |
cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.5:*:*:*:*:*:*:*
|
| oracle | retail_xstore_point_of_service | 17.0.3 | - | - |
cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.3:*:*:*:*:*:*:*
|
| oracle | retail_xstore_point_of_service | 18.0.2 | - | - |
cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.2:*:*:*:*:*:*:*
|
| oracle | retail_xstore_point_of_service | 19.0.1 | - | - |
cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.1:*:*:*:*:*:*:*
|
| oracle | storagetek_acsls | 8.5.1 | - | - |
cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:*
|
| oracle | storagetek_tape_analytics_sw_tool | 2.3 | - | - |
cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 10.3.6.0.0 | - | - |
cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 12.2.1.3.0 | - | - |
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 12.2.1.4.0 | - | - |
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 14.1.1.0.0 | - | - |
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
CVSS评分详情
3.0 (cna)
MEDIUM
6.5
CVSS向量:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
机密性
HIGH
完整性
NONE
可用性
NONE
时间信息
发布时间:
2019-09-18 22:23:10
修改时间:
2024-09-16 17:43:20
创建时间:
2025-11-11 15:35:46
更新时间:
2025-11-11 15:54:58
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-3739 |
2025-11-11 15:20:11 | 2025-11-11 07:35:46 |
| NVD | nvd_CVE-2019-3739 |
2025-11-11 14:56:26 | 2025-11-11 07:44:15 |
| CNNVD | cnnvd_CNNVD-201909-880 |
2025-11-11 15:10:17 | 2025-11-11 07:54:58 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:54:58
vulnerability_type: 未提取 → 加密问题; cnnvd_id: 未提取 → CNNVD-201909-880; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 加密问题
- cnnvd_id: 未提取 -> CNNVD-201909-880
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:44:15
affected_products_count: 1 → 40; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 40
- data_sources: ['cve'] -> ['cve', 'nvd']