Vulnerability Details CVE-2019-3730
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known as a “padding oracle attack vulnerability”. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.4%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 5.0
References
Products affected by CVE-2019-3730
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.0
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.0.1
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.1
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.2
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.3
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.4
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.5
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.6
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.6.1
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.1.6.2
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.2.0
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.3
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.3.1
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.3.2
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.3.3
-
cpe:2.3:a:dell:bsafe_micro-edition-suite:4.4