CVE-2018-15769

Home/CVE/RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series)

CVE

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series)

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.

HIGH · CVSS 7.5 EPSS 0.01484

Schedule remediation

CVSS base score ≥ 7.0

Sigma rules1 YARA rules0

▤

Affected Products & Versions

dell bsafe>= 4.0.0 and < 4.0.11
dell bsafe>= 4.1.0 and < 4.1.6.2
oracle application testing suiteall versions
oracle communications analyticsall versions
oracle communications ip service activatorall versions
oracle core rdbmsall versions
oracle enterprise manager ops centerall versions
oracle goldengate application adaptersall versions
Show all 13 affected productsoracle jd edwards enterpriseone toolsall versions
oracle real user experience insightall versions
oracle retail predictive application serverall versions
oracle security serviceall versions
oracle timesten in-memory database< 18.1.4.1.0

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighSecurity Service Disabled Via Reg.EXE

▣