DSA-2023-156: Security Update for Dell BSAFE SSL-J Dell BSAFE SSL-J Vulnerability
Podsumowanie: Dell BSAFE SSL-J remediation is available to address a vulnerability that could be exploited by malicious users to compromise the affected system.
Ten artykuł dotyczy
Ten artykuł nie dotyczy
Ten artykuł nie jest powiązany z żadnym konkretnym produktem.
Nie wszystkie wersje produktu zostały zidentyfikowane w tym artykule.
Skutki
Medium
Szczegóły
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-28077 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. | 4.4 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-28077 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. | 4.4 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Produkty, których dotyczy problem, i środki zaradcze
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell BSAFE SSL-J | 6.0.x - 6.5 7.0 7.1 |
6.5.1 7.1.1 |
How To Request a Dell BSAFE product download |
NOTE: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell BSAFE SSL-J | 6.0.x - 6.5 7.0 7.1 |
6.5.1 7.1.1 |
How To Request a Dell BSAFE product download |
NOTE: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Obejścia problemu i środki zaradcze
Workarounds or mitigations may exist based on individual use case and usage of the product. Customers with an active BSAFE SSL-J maintenance contract should contact Dell BSAFE Support at bsafe.support@dell.com, or bsafe.support.japan@dell.com for further details.
Historia zmian
| Revision | Date | Description |
|---|---|---|
| 1.0 |
2023-05-19 | Initial Release |
| 2.0 |
2023-07-19 | Updated "Affected Products and Remediation" section |
| 3.0 |
2023-09-14 | Updated "Proprietary Code " section |
| 4.0 |
2024-01-12 | Updated the detailed public description |
| 5.0 |
2024-01-12 | Formatting update without any change to content |
| 6.0 |
2024-01-12 | Updated the detailed public description |
| 7.0 |
2024-09-23 | Updated backend information to improve self-serve alignment. |
Powiązane informacje
Zastrzeżenie prawne
Produkty, których dotyczy problem
BSAFE SSL-JWłaściwości artykułu
Numer artykułu: 000214287
Typ artykułu: Dell Security Advisory
Ostatnia modyfikacja: 23 wrz 2024
Znajdź odpowiedzi na swoje pytania u innych użytkowników produktów Dell
Usługi pomocy technicznej
Sprawdź, czy Twoje urządzenie jest objęte usługą pomocy technicznej.