Vulnerability Details CVE-2023-33855
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.3%
CVSS Severity
CVSS v3 Score 3.7
References
Products affected by CVE-2023-33855
-
cpe:2.3:a:ibm:common_cryptographic_architecture:*
-
cpe:2.3:o:ibm:aix:-
-
cpe:2.3:o:ibm:i:-
-
cpe:2.3:o:linux:linux_kernel:-