CVE-2019-3738 MEDIUM

CVE-2019-3738

Vendor Dell
Product RSA BSAFE Crypto-J
Weakness CWE-325
Published September 18, 2019
Last update September 16, 2024

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.

Key dates

02Disclosure timeline

September 18, 2019 CVE published
September 16, 2024 Record updated