WebLogic Observable Discrepancy Vulnerability - CVE-2019-3739 - Vulnerability Database

WebLogic Observable Discrepancy Vulnerability - CVE-2019-3739

Medium
Reference: CVE-2019-3739
Title: WebLogic Observable Discrepancy Vulnerability
Overview:

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.