CVE-2018-11055medium

CVE-2018-11055: falha de média gravidade em RSA BSAFE Micro Edition Suite

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BSAFE Micro Edition Suite

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.4%
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
RSA · BSAFE Micro Edition Suite
CVEs relacionadas — RSA BSAFE Micro Edition Suite

No mesmo produto, das mais perigosas para as menos.

CVE-2018-11058HIGHCVE-2018-11058EPSS 4.0%CVE-2018-11054HIGHCVE-2018-11054EPSS 3.2%CVE-2018-11056MEDIUMCVE-2018-11056EPSS 1.9%CVE-2018-11057MEDIUMCVE-2018-11057EPSS 1.7%