CVE-2022-24409: dell bsafe_ssl-j Covert Timing Channel

Vulnerability summary

CVE-2022-24409 is a high (CVSS 7.5) Covert Timing Channel vulnerability in dell bsafe_ssl-j. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 60.9% of scored vulnerabilities.

Timeline

1. 23-02-2022
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.

• CWE-385Covert Timing ChannelCovert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.