Description
EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS#12 file to the toolkit and guess the current MAC one byte at a time. This is possible because Crypto-J uses a non-constant-time method to compare the stored MAC with the calculated MAC. This vulnerability is similar to the issue described in CVE-2015-2601.
References (3)
Core 3
Core References
Mailing List, Third Party Advisory, VDB Entry x_refsource_confirm
http://www.securityfocus.com/archive/1/540066/30/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/95831
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1037732
Scores
CVSS v3
3.7
EPSS
0.0028
EPSS Percentile
51.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (2)
dell/bsafe_crypto-j
< 6.2.2
n/a/RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2
RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2
Published
Feb 03, 2017
Tracked Since
Feb 18, 2026