2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"product":"RSA BSAFE Crypto-J","vendor":"Dell","versions":[{"status":"affected","version":"prior to 6.2.5"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:dell:bsafe_cert-j:*:*:*:*:*:*:*:*","matchCriteriaId":"1710B5A7-08C4-44D8-A175-044FCD92B314","versionEndIncluding":"6.2.4","vulnerable":true},{"criteria":"cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*","matchCriteriaId":"9757B880-0E5B-40B1-A15C-0EAA52046A73","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*","matchCriteriaId":"FEE68BD5-3D1C-4D69-B026-319FBEDBC798","versionEndIncluding":"6.2.4.1","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*","matchCriteriaId":"E26D80A2-E490-44B6-A8D2-1AEF487E72B2","versionEndIncluding":"2.3.1","versionStartIncluding":"2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:mcafee:threat_intelligence_exchange_server:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A0F26126-55C2-4E2E-A586-D93FF38ABF6F","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:application_performance_management:13.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E87B8C7B-2654-4F9C-9B5D-794DA484B42D","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:application_performance_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9C6F5710-490D-41D4-8C9B-27FC530117A7","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_network_integrity:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7E8F4F3-1A39-4CBB-98C4-66D5DCE3F57D","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FB92D8A7-2ABD-4B70-A32C-4B6B866C5B8B","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B21E6EEF-2AB7-4E96-B092-1F49D11B4175","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"17A91FD9-9F77-42D3-A4D9-48BC7568ADE1","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"539DA24F-E3E0-4455-84C6-A9D96CD601B3","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A7637F8B-15F1-42E2-BE18-E1FF7C66587D","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"89FE33CE-5995-4C53-8331-B49156F852B3","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"46E7237C-00BD-4490-96C3-A8EAE4CE2C0B","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*","matchCriteriaId":"20352616-6BCA-485D-8DD7-DFC97AD6A30D","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*","matchCriteriaId":"C1E05472-8F3A-4E46-90E5-50EA6D555FDC","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*","matchCriteriaId":"68165D37-489E-45D7-BA7A-A38164B5C26D","versionEndExcluding":"19.1.0.0.0.210420","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:goldengate:19.1.0.0.0.210420:*:*:*:*:*:*:*","matchCriteriaId":"0C9A68D0-1C6A-4B0B-934B-F82555C09C51","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"44357172-4035-4D57-9C83-D80BDDE8E8C7","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDDD1BFF-9B0D-45DA-86DC-05CF829107FB","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*","matchCriteriaId":"CE7DB324-98A0-40AD-96D4-0800340F6F3A","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*","matchCriteriaId":"42064F46-3012-4FB1-89BA-F13C2E4CBB6B","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*","matchCriteriaId":"F73E2EFA-0F43-4D92-8C7D-9E66811B76D6","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BCF6CCE5-250D-4B10-AD18-7DE7D84BF220","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6D325A0-3441-41AC-B00F-F2A7F85370A1","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"924AFE2D-D1BB-4026-9C12-BA379F8C5BEA","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*","matchCriteriaId":"378A6656-252B-4929-83EA-BC107FDFD357","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*","matchCriteriaId":"363395FA-C296-4B2B-9D6F-BCB8DBE6FACE","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*","matchCriteriaId":"F62A2144-5EF8-4319-B8C2-D7975F51E5FA","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0E703304-0752-46F2-998B-A3D37C9E7A54","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*","matchCriteriaId":"722969B5-36CD-4413-954B-347BB7E51FAE","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BF295023-399E-4180-A28B-2DA3327A372C","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3E5A2A49-42B0-44EB-B606-999275DC1DA1","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.3:*:*:*:*:*:*:*","matchCriteriaId":"54B0A494-14DD-4384-9DCE-14945EBE1A19","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A890746E-EE1A-4DBC-BB04-84CC79767F85","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6308E929-D44D-48A1-BAEE-47BE4E164124","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FDD2640A-5964-4937-B912-CEA2173FAFEE","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11BE9059-29C1-417D-AFB3-98066E95D883","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E55B3AA9-69BE-4136-8C3A-FD0DDCD3FA4B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key."},{"lang":"es","value":"RSA BSAFE Crypto-J en versiones anteriores a la 6.2.5, son susceptibles a una vulnerabilidad Missing Required Cryptographic Step. Un atacante remoto malicioso podría explotar potencialmente esta vulnerabilidad para obligar a dos partes a calcular la misma clave compartida predecible."}],"id":"CVE-2019-3738","lastModified":"2026-06-17T02:35:29.360","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security_alert@emc.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-09-18T23:15:11.047","references":[{"source":"security_alert@emc.com","tags":["Third Party Advisory"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10318"},{"source":"security_alert@emc.com","url":"https://www.dell.com/support/security/en-us/details/DOC-106556/DSA-2019-094-RSA-BSAFE®%3B-Crypto-J-Multiple-Security-Vulnerabilities"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"source":"security_alert@emc.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10318"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.dell.com/support/security/en-us/details/DOC-106556/DSA-2019-094-RSA-BSAFE®%3B-Crypto-J-Multiple-Security-Vulnerabilities"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-325"}],"source":"security_alert@emc.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-347"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|