HIGH🇵🇱 Wersja polska

CVE-2015-0534

CVSS 7.5v3.1pub. 2015-08-20upd. 2026-05-06

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, a similar issue to CVE-2014-8275.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Dell Bsafe

    APP
    Dell
    4.0.0 – 4.0.8 (bez)4.1.0 – 4.1.3 (bez)

  • Dell Bsafe Ssl C

    APP
    Dell
    ≤ 2.8.9

  • Dell Bsafe Ssl J

    APP
    Dell
    < 6.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-34381CRITICAL9.1PL ✓ten sam produkt

Dell BSAFE SSL-J i Crypto-J — niezaktualizowany komponent zewnętrzny umożliwia zdalne przejęcie systemu

CVE-2018-11058CRITICAL9.8ten sam produkt

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAF...

CVE-2015-0537CRITICAL9.8ten sam produkt

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x befor...

CVE-2018-15769HIGH7.5ten sam produkt

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1...

CVE-2018-11054HIGH7.5ten sam produkt

RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker co...