CVE-2014-4630

Published: Dec 30, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."

Affected (7)

Products: Dell: Bsafe Micro Edition Suite, Bsafe Ssl J

Dell

2 products

Bsafe Micro Edition Suite

Bsafe Ssl J

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Dell Bsafe Micro Edition Suite	Version 4.0.0
Dell Bsafe Micro Edition Suite	Version 4.0.1
Dell Bsafe Micro Edition Suite	Version 4.0.2
Dell Bsafe Micro Edition Suite	Version 4.0.3
Dell Bsafe Micro Edition Suite	Version 4.0.4
Dell Bsafe Micro Edition Suite	Version 4.0.5
Dell Bsafe Ssl J	Up to 6.1.2