CVE-2018-11055

Home/CVE/RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper

CVE

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.

MEDIUM · CVSS 5.5 EPSS 0.00088

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules1 YARA rules0

⬡

Weakness Classification

CWE-404Improper Resource Shutdown or Release

▤

Affected Products & Versions

dell bsafe>= 4.0.0 and < 4.0.11
dell bsafe>= 4.1.0 and < 4.1.6.1
oracle application testing suiteall versions
oracle communications analyticsall versions
oracle communications ip service activatorall versions
oracle core rdbmsall versions
oracle enterprise manager ops centerall versions
oracle goldengate application adaptersall versions
Show all 13 affected productsoracle jd edwards enterpriseone toolsall versions
oracle real user experience insightall versions
oracle retail predictive application serverall versions
oracle security serviceall versions
oracle timesten in-memory database< 18.1.4.1.0

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighSecurity Service Disabled Via Reg.EXE

▣