| Package | Affected versions | Patched versions |
|---|---|---|
| bsafe crypto-c-micro-edition | < 4.1.4 | 4.1.4 |
| bsafe micro-edition-suite | ≥ 4.0.0, < 4.0.13≥ 4.1.0, < 4.4.0 | 4.0.134.4.0 |
RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free