WebLogic Observable Discrepancy Vulnerability - CVE-2019-3739
Reference:
CVE-2019-3739
Title:
WebLogic Observable Discrepancy Vulnerability
Overview:
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.