Vulnerability in Dell Bsafe Share
CVE-2014-4193
The TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended Random extension during use of the Dual_EC_DRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by requesting long nonces from a server, a different issue than CVE-2007-6755.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.
Affected products
- Dell Bsafe_share
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)