mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 04:24:05 +02:00
0xMarcio
1.2 KiB
1.2 KiB
CVE-2019-3738
Description
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
POC
Reference
- https://kc.mcafee.com/corporate/index?page=content&id=SB10318
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html