Vulnerability Details : CVE-2016-8217
EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS#12 file to the toolkit and guess the current MAC one byte at a time. This is possible because Crypto-J uses a non-constant-time method to compare the stored MAC with the calculated MAC. This vulnerability is similar to the issue described in CVE-2015-2601.
Vulnerability category: Information leak
Products affected by CVE-2016-8217
- cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-8217
0.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 55 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-8217
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
3.7
|
LOW | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
2.2
|
1.4
|
NIST |
CWE ids for CVE-2016-8217
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-8217
-
http://www.securityfocus.com/archive/1/540066/30/0/threaded
SecurityFocusMailing List;Third Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1037732
RSA BSAFE Crypto-J Bugs Let Remote USers Bypass OCSP Time Validation and Conduct Timing Attacks to Determine PKCS MAC Values - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/95831
EMC RSA BSAFE Crypto-J Security Bypass and Information Disclosure VulnerabilitiesThird Party Advisory;VDB Entry
Jump to