CVE-2018-11069: Medium severity emc rsa bsafe ssl-j vulnerability
Published Sep 11, 2018
·Updated
RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Affected Software
1 affected component
Dell BSAFE SSL-J<6.2.4
Event History
Sep 5, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-11069?
CVE-2018-11069 has a high severity rating due to its potential for remote exploitation and key recovery.
2
How do I fix CVE-2018-11069?
To fix CVE-2018-11069, update to RSA BSAFE SSL-J version 6.2.4 or later.
3
What type of vulnerability is CVE-2018-11069?
CVE-2018-11069 is a Covert Timing Channel vulnerability related to RSA decryption.
4
Who is affected by CVE-2018-11069?
CVE-2018-11069 affects all versions of RSA BSAFE SSL-J prior to 6.2.4.
5
Can CVE-2018-11069 be exploited remotely?
Yes, CVE-2018-11069 can be exploited remotely, allowing attackers to potentially recover RSA keys.