3.7

CVE-2024-41760

IBM Common Cryptographic Architecture information disclosure

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 

could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Common Cryptographic Architecture Version >= 7.0.0 < 7.5.52
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Linux ≫ Linux Kernel Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.288
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@us.ibm.com 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.