← Back

CVE-2023-33855

nvd nist
Published: Mar 26, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.2 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.

Affected (1)

Ibm
1 product
Common Cryptographic Architecture
Configuration A
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Common Cryptographic Architecture
From 7.0.0 to 7.5.37
Running on/withPlatform Versions
Ibm
Aix
All versions
Ibm
I
All versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-385
Covert Timing Channel
Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.

References (4)

Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.