DSA-2023-156: Security Update for Dell BSAFE SSL-J Dell BSAFE SSL-J Vulnerability
Summary: Dell BSAFE SSL-J remediation is available to address a vulnerability that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-28077 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. | 4.4 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-28077 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. | 4.4 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Affected Products & Remediation
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell BSAFE SSL-J | 6.0.x - 6.5 7.0 7.1 |
6.5.1 7.1.1 |
How To Request a Dell BSAFE product download |
NOTE: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell BSAFE SSL-J | 6.0.x - 6.5 7.0 7.1 |
6.5.1 7.1.1 |
How To Request a Dell BSAFE product download |
NOTE: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Workarounds & Mitigations
Workarounds or mitigations may exist based on individual use case and usage of the product. Customers with an active BSAFE SSL-J maintenance contract should contact Dell BSAFE Support at bsafe.support@dell.com, or bsafe.support.japan@dell.com for further details.
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 |
2023-05-19 | Initial Release |
| 2.0 |
2023-07-19 | Updated "Affected Products and Remediation" section |
| 3.0 |
2023-09-14 | Updated "Proprietary Code " section |
| 4.0 |
2024-01-12 | Updated the detailed public description |
| 5.0 |
2024-01-12 | Formatting update without any change to content |
| 6.0 |
2024-01-12 | Updated the detailed public description |
| 7.0 |
2024-09-23 | Updated backend information to improve self-serve alignment. |
Related Information
Legal Disclaimer
Affected Products
BSAFE SSL-JArticle Properties
Article Number: 000214287
Article Type: Dell Security Advisory
Last Modified: 23 Sep 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.