CVE-2014-0627: Medium severity Dell BSAFE SSL-J vulnerability
The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a certain incomplete-handshake state.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0627?
CVE-2014-0627 is considered a high-severity vulnerability due to its potential to allow remote attackers to exploit weak cipher suites.
How do I fix CVE-2014-0627?
To fix CVE-2014-0627, update the software to version 5.1.3 or later for 5.x, and version 6.0.2 or later for 6.x.
What versions are affected by CVE-2014-0627?
CVE-2014-0627 affects EMC RSA BSAFE SSL-J versions 5.0, 5.1.0, 5.1.1, 5.1.2, and 6.0, along with version 6.0.1.
What type of attack does CVE-2014-0627 enable?
CVE-2014-0627 enables remote attackers to force the selection of weak cipher suites during an incomplete handshake.
Is CVE-2014-0627 still a concern if updates are applied?
CVE-2014-0627 is no longer a concern once the software is properly updated to the specified versions.