Information Exposure Through Timing Discrepancy in RSA BSAFE Crypto-C Micro Edition and RSA Micro Edition Suite

Information Exposure Through Timing Discrepancy in RSA BSAFE Crypto-C Micro Edition and RSA Micro Edition Suite

CVE-2019-3731 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.

Learn more about our User Device Pen Test.