5.5

CVE-2018-11055

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Bsafe SwEdition micro_edition_suite Version >= 4.0.0 < 4.0.11
Dell ≫ Bsafe SwEdition micro_edition_suite Version >= 4.1.0 < 4.1.6.1
Oracle ≫ Application Testing Suite Version 13.3.0.1
Oracle ≫ Communications Analytics Version 12.1.1
Oracle ≫ Core Rdbms Version 11.2.0.4
Oracle ≫ Core Rdbms Version 12.1.0.2
Oracle ≫ Core Rdbms Version 12.2.0.1
Oracle ≫ Core Rdbms Version 18c
Oracle ≫ Core Rdbms Version 19c
Oracle ≫ Goldengate Application Adapters Version 12.3.2.1.0
Oracle ≫ Real User Experience Insight Version 13.1.2.1
Oracle ≫ Real User Experience Insight Version 13.2.3.1
Oracle ≫ Real User Experience Insight Version 13.3.1.0
Oracle ≫ Security Service Version 11.1.1.9.0
Oracle ≫ Security Service Version 12.1.3.0.0
Oracle ≫ Security Service Version 12.2.1.3.0
Oracle ≫ Timesten In-memory Database Version < 18.1.4.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.339
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
EMC 4.4 0.8 3.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

https://www.oracle.com/security-alerts/cpujan2020.html
Patch
Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2018/Aug/46
Third Party Advisory
Mailing List