CVE-2019-3732
First published: Thu Sep 12 2019(Updated: )
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to 4.1.6.1 (in 4.1.x) and versions prior to 4.3.3 (4.2.x and 4.3.x) are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Bsafe Crypto-c-micro-edition | >=4.0<4.0.5.3 | |
| Dell Bsafe Micro-edition-suite | >=4.0.0<4.0.11 | |
| Dell Bsafe Micro-edition-suite | >=4.1.0<4.1.6.1 | |
| Dell Bsafe Micro-edition-suite | >=4.2.0<4.3.3 | |
| Emc Rsa Bsafe Crypto-c | >=4.1<4.1.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-3732?
CVE-2019-3732 is a vulnerability in RSA BSAFE Crypto-C Micro Edition and RSA Micro Edition Suite that allows for information exposure.
What is the severity of CVE-2019-3732?
CVE-2019-3732 has a severity rating of high with a CVSS score of 7.5.
Which software versions are affected by CVE-2019-3732?
RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite versions prior to 4.0.11 (in 4.0.x), versions prior to 4.1.6.1 (in 4.1.x), and versions prior to 4.3.3 (4.2.x and 4.3.x) are affected.
How do I fix CVE-2019-3732?
To fix CVE-2019-3732, it is recommended to update to RSA BSAFE Crypto-C Micro Edition version 4.0.5.3 (or later) or 4.1.3.3 (or later), and RSA Micro Edition Suite version 4.0.11 (or later), 4.1.6.1 (or later), or 4.3.3 (or later).
Where can I find more information about CVE-2019-3732?
More information about CVE-2019-3732 can be found at the following link: [Link](https://www.dell.com/support/kbdoc/000194054)
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell bsafe crypto-c-micro-edition
- version/dell bsafe crypto-c-micro-edition/4.0
- canonical/dell bsafe micro-edition-suite
- version/dell bsafe micro-edition-suite/4.0.0
- version/dell bsafe micro-edition-suite/4.1.0
- version/dell bsafe micro-edition-suite/4.2.0
- vendor/emc
- canonical/emc rsa bsafe crypto-c
- version/emc rsa bsafe crypto-c/4.1