CVE-2020-35167: 
Oracle Database Server vulnerability analysis and mitigation

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability (Dell Advisory).

The vulnerability has been assigned a CVSS Base Score of 4.8 MEDIUM with vector string AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N. This indicates the vulnerability requires physical access, has high attack complexity, requires low privileges, needs no user interaction, has changed scope, with potential high confidentiality impact but no integrity or availability impact (Dell Advisory).

The vulnerability could potentially lead to high confidentiality impact if successfully exploited, though it requires physical access and has high attack complexity. The vulnerability affects the cryptographic functionality of the software (Dell Advisory).

Dell has released updated versions to address this vulnerability: Dell BSAFE Crypto-C Micro Edition version 4.1.5 and Dell BSAFE Micro Edition Suite version 4.6. Users are advised to upgrade to these versions. Additional workarounds or mitigations may exist based on individual use cases, but these are only available to customers with active BSAFE maintenance contracts (Dell Advisory).