CVE-2019-3739

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

• Dell Bsafe Cert J

  APP
  Dell
  ≤ 6.2.4

• Dell Bsafe Crypto J

  APP
  Dell
  < 6.2.5

• Dell Bsafe Ssl J

  APP
  Dell
  ≤ 6.2.4.1

• Oracle Application Performance Management

  APP
  Oracle
  13.3.0.013.4.0.0

• Oracle Communications Network Integrity

  APP
  Oracle
  7.3.27.3.57.3.6

• Oracle Database

  APP
  Oracle
  12.1.0.212.2.0.118c19c

• Oracle Goldengate

  APP
  Oracle
  < 19.1.0.0.0.210420

• Oracle Retail Assortment Planning

  APP
  Oracle
  15.0.3.016.0.3.0

• Oracle Retail Integration Bus

  APP
  Oracle
  14.115.016.0

• Oracle Retail Predictive Application Server

  APP
  Oracle
  14.1.3.015.0.3.016.0.3.0

• Oracle Retail Service Backbone

  APP
  Oracle
  14.115.016.0

• Oracle Retail Store Inventory Management

  APP
  Oracle
  14.0.414.1.315.0.316.0.3

• Oracle Retail Xstore Point Of Service

  APP
  Oracle
  15.0.316.0.517.0.318.0.219.0.1

• Oracle Storagetek Acsls

  APP
  Oracle
  8.5.1

• Oracle Storagetek Tape Analytics Sw Tool

  APP
  Oracle
  2.3

• Oracle Weblogic Server

  APP
  Oracle
  10.3.6.0.012.2.1.3.012.2.1.4.014.1.1.0.0