1. Home
  2. CVE Database
  3. CVE-2022-24409
MEDIUM · 5.9

CVE-2022-24409

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance...

Vulnerability Description

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DellBsafe Ssl-J>= 6.1.0, < 6.4

Related Weaknesses (CWE)

CWE-385

References

FAQ

What is CVE-2022-24409?

CVE-2022-24409 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance...

How severe is CVE-2022-24409?

CVE-2022-24409 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24409?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Bsafe Ssl-J.