| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| bsafe cert-j | ≤ 6.2.4 | |
| bsafe crypto-j | < 6.2.5 | 6.2.5 |
| bsafe ssl-j | ≤ 6.2.4.1 | |
| application performance management | = 13.3.0.0= 13.4.0.0 | |
| communications network integrity | = 7.3.2= 7.3.5= 7.3.6 | |
| database | = 12.1.0.2= 12.2.0.1= 18c= 19c | |
| goldengate | < 19.1.0.0.0.210420 | 19.1.0.0.0.210420 |
| retail assortment planning | = 15.0.3.0= 16.0.3.0 | |
| retail integration bus | = 14.1= 15.0= 16.0 | |
| retail predictive application server | = 14.1.3.0= 15.0.3.0= 16.0.3.0 | |
| retail service backbone | = 14.1= 15.0= 16.0 | |
| retail store inventory management | = 14.0.4= 14.1.3= 15.0.3= 16.0.3 | |
| retail xstore point of service | = 15.0.3= 16.0.5= 17.0.3= 18.0.2= 19.0.1 | |
| storagetek acsls | = 8.5.1 | |
| storagetek tape analytics sw tool | = 2.3 | |
| weblogic server | = 10.3.6.0.0= 12.2.1.3.0= 12.2.1.4.0= 14.1.1.0.0 |
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí