Vulnerability in Dell Bsafe Share
CVE-2014-4191
The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the Dual_EC_DRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by recovering the algorithm's inner state, a different issue than CVE-2007-6755.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.
Affected products
- Dell Bsafe_share
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)