CVE-2018-11068 : Security Advisory and Response

RSA BSAFE SSL-J versions prior to 6.2.4 have a vulnerability known as Heap Inspection, potentially allowing attackers with physical access to retrieve sensitive key information.

Understanding CVE-2018-11068

Versions of RSA BSAFE SSL-J prior to 6.2.4 are affected by a Heap Inspection vulnerability that poses security risks.

What is CVE-2018-11068?

RSA BSAFE SSL-J versions before 6.2.4 contain a Heap Inspection vulnerability
Attackers with physical system access could exploit this flaw to access sensitive key material

The Impact of CVE-2018-11068

CVSS Base Score: 3.9 (Low)
Confidentiality Impact: High
Privileges Required: High
Attack Vector: Physical
This vulnerability does not impact system availability or integrity

Technical Details of CVE-2018-11068

RSA BSAFE SSL-J vulnerability specifics and affected systems.

Vulnerability Description

The vulnerability arises from improper clearing of heap memory before release
Known as 'Heap Inspection' vulnerability

Affected Systems and Versions

Product: RSA BSAFE SSL-J
Vendor: Dell EMC
Affected Versions: < 6.2.4 (unspecified custom version)

Exploitation Mechanism

Attackers with physical system access can exploit the vulnerability to retrieve sensitive key information

Mitigation and Prevention

Protecting systems from CVE-2018-11068.

Immediate Steps to Take

Update RSA BSAFE SSL-J to version 6.2.4 or higher
Restrict physical access to systems containing sensitive key information

Long-Term Security Practices

Implement strict access controls and monitoring for physical system access
Regularly review and update security protocols

Patching and Updates

Apply patches and updates provided by Dell EMC to address the Heap Inspection vulnerability