What’s Vulnerable › Vulnerabilities
CVE-2019-3730
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-09-30 · updated 2026-06-17
- Weakness: CWE-649
Description
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known as a “padding oracle attack vulnerability”. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Affected products
- Dell RSA BSAFE MES: from 4.1.0 before 4.1.6.3; from 4.2.0 before 4.4.0 — fixed in 4.1.6.3, 4.4.0
How to fix
Upgrade to a fixed version: Dell RSA BSAFE MES 4.1.6.3, 4.4.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2019-3730 or the next vulnerability affects your stack