CVE-2019-3738

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-J versions prior to 6.2.5

Description The issue is related to a Missing Required Cryptographic Step, which could be exploited by a malicious remote attacker to coerce two parties into computing the same predictable shared key.

Recommendations For RSA BSAFE Crypto-J versions prior to 6.2.5, update to version 6.2.5 or later to resolve the issue.