CVE-2019-3730
- State
- Published
- Severity
- 5.9 Medium
- Published
- Sep 30, 2019
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2019
Description
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known as a “padding oracle attack vulnerability”. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.9 Medium | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | dell |
Weaknesses
- CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
Affected Products
| Product | Versions |
|---|---|
RSA BSAFE MESDell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.