CVE-2014-0627

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE SSL-J versions 5.x before 5.1.3 EMC RSA BSAFE SSL-J versions 6.x before 6.0.2

Description The issue allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a certain incomplete-handshake state in the SSLEngine API implementation.

Recommendations For EMC RSA BSAFE SSL-J versions 5.x before 5.1.3, update to version 5.1.3 or later. For EMC RSA BSAFE SSL-J versions 6.x before 6.0.2, update to version 6.0.2 or later.