CVE-2018-11055 Vulnerability Details

  /     /     /  

CVE-2018-11055 Metadata Quick Info

CVE Published: 31/08/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: dell | Vendor: RSA | Product: BSAFE Micro Edition Suite
Status : PUBLISHED

---

CVE-2018-11055 Description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release (\'Heap Inspection\') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Improper Clearing of Heap Memory Before Release ( Heap Inspection ) vulnerability
Source: RSA

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).