CVE-2018-11068

Опубликовано: 11 сент. 2018

Источник: nvd

CVSS3: 3.9

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.

Ссылки

http://www.securitytracker.com/id/1041614
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2018/Sep/7
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1041614
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2018/Sep/7
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*

Версия до 6.2.4 (исключая)

EPSS

Процентиль: 24%

0.00081

Низкий

3.9 Low

CVSS3

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-459

Связанные уязвимости

GHSA-458x-mgv4-wcmj

CVSS3: 4.6

github

больше 3 лет назад

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.

EPSS

Процентиль: 24%

0.00081

Низкий

3.9 Low

CVSS3

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-459