Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpujul2022.html | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
06 Oct 2022, 16:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle http Server
Oracle Oracle security Service Oracle weblogic Server Proxy Plug-in Oracle database |
|
| CPE | cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:security_service:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:security_service:12.2.1.4.0:*:*:*:*:*:*:* |
|
| References | (N/A) https://www.oracle.com/security-alerts/cpujul2022.html - Patch, Third Party Advisory |
25 Jul 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Jul 2022, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:* cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:* |
|
| References | (CONFIRM) https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 8.1 |
| CWE | NVD-CWE-Other | |
| First Time |
Dell bsafe Crypto-c-micro-edition
Dell bsafe Micro-edition-suite Dell |
12 Jul 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability. |
11 Jul 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-11 20:15
Updated : 2023-12-10 14:35
NVD link : CVE-2020-35164
Mitre link : CVE-2020-35164
CVE.ORG link : CVE-2020-35164
JSON object : View
Products Affected
dell
- bsafe_micro-edition-suite
- bsafe_crypto-c-micro-edition
oracle
- weblogic_server_proxy_plug-in
- http_server
- database
- security_service
CWE