CVE-2019-3740 MEDIUM

CVE-2019-3740

Vendor Dell

Product RSA BSAFE Crypto-J

Weakness CWE-310

Published September 18, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Key dates

02Disclosure timeline

September 18, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3740 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/310.html

Related vulnerabilities

04Related CVE

CVE-2018-5462 CVE-2021-42001 PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure CVE-2017-13092 The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle CVE-2024-20690 Windows Nearby Sharing Spoofing Vulnerability CVE-2017-13093 The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans