| Package | Affected versions | Patched versions |
|---|---|---|
| bsafe cert-j | ≤ 6.2.4 | |
| bsafe crypto-j | < 6.2.5 | 6.2.5 |
| bsafe ssl-j | ≤ 6.2.4.1 | |
| application performance management | = 13.3.0.0= 13.4.0.0 | |
| communications network integrity | = 7.3.2= 7.3.5= 7.3.6 | |
| database | = 12.1.0.2= 12.2.0.1= 18c= 19c | |
| goldengate | < 19.1.0.0.0.210420 | 19.1.0.0.0.210420 |
| retail assortment planning | = 15.0.3.0= 16.0.3.0 | |
| retail integration bus | = 14.1= 15.0= 16.0 | |
| retail predictive application server | = 14.1.3.0= 15.0.3.0= 16.0.3.0 | |
| retail service backbone | = 14.1= 15.0= 16.0 | |
| retail store inventory management | = 14.0.4= 14.1.3= 15.0.3= 16.0.3 | |
| retail xstore point of service | = 15.0.3= 16.0.5= 17.0.3= 18.0.2= 19.0.1 | |
| storagetek acsls | = 8.5.1 | |
| storagetek tape analytics sw tool | = 2.3 | |
| weblogic server | = 10.3.6.0.0= 12.2.1.3.0= 12.2.1.4.0= 14.1.1.0.0 |
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free