| Package | Affected versions | Patched versions |
|---|---|---|
| bsafe cert-j | ≤ 6.2.4 | |
| bsafe crypto-j | < 6.2.5 | 6.2.5 |
| bsafe ssl-j | ≤ 6.2.4.1 | |
| threat intelligence exchange server | = 3.0.0≥ 2.0.0, ≤ 2.3.1 | |
| application performance management | = 13.3.0.0= 13.4.0.0 | |
| communications network integrity | = 7.3.2= 7.3.5= 7.3.6 | |
| communications unified inventory management | = 7.3.2= 7.3.4= 7.3.5= 7.4.0= 7.4.1 | |
| database | = 12.1.0.2= 12.2.0.1= 18c= 19c | |
| goldengate | = 19.1.0.0.0.210420< 19.1.0.0.0.210420 | 19.1.0.0.0.210420 |
| retail assortment planning | = 15.0.3.0= 16.0.3.0 | |
| retail integration bus | = 14.1= 15.0= 16.0 | |
| retail predictive application server | = 14.1.3.0= 15.0.3.0= 16.0.3.0 | |
| retail service backbone | = 14.1= 15.0= 16.0 | |
| retail store inventory management | = 14.0.4= 14.1.3= 15.0.3= 16.0.3 | |
| retail xstore point of service | = 15.0.3= 16.0.5= 17.0.3= 18.0.2= 19.0.1 | |
| storagetek tape analytics sw tool | = 2.3 |
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free