Security Advisory

CVE-2023-33855

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-26 14:04:37
Last updated 2024-08-05 16:12:49
Assigner ibm
CVSS score 3.7
State PUBLISHED

Description

Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.