CVE-2014-4630: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure t...

Security readout for executives and security teams

This flaw affects RSA BSAFE TLS components that did not verify a server certificate stayed consistent during renegotiation. A network attacker positioned between parties could abuse the triple handshake weakness to read sensitive data or alter TLS session data. Exposure is likely limited to applications or services embedding affected RSA BSAFE MES 4.0.x or RSA BSAFE SSL-J before 6.1.4. The source bundle does not identify downstream products, package names, or deployment patterns. Treat as a targeted legacy TLS dependency risk. Urgency is highest where affected BSAFE components protect sensitive or internet-facing traffic. If no affected component is present, no action is indicated beyond documentation. Mitigation focus: Upgrade RSA BSAFE MES to 4.0.6 or later where present.; Upgrade RSA BSAFE SSL-J to 6.1.4 or later where present.; Check current vendor guidance for supported replacement options..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.