Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-92wr-j974-xw8j

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key.

RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key.

EPSS

Процентиль: 57%
0.00352
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 5.9
nvd
больше 7 лет назад

RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key.

EPSS

Процентиль: 57%
0.00352
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-327