Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2023-33855

IBM Common Cryptographic Architecture information disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Common Cryptographic Architecture

Default version status: unaffected

  • 7.0.0 to ≤ 7.5.36affected

References