CVE-2023-33855: falha de baixa gravidade em IBM Common Cryptographic Architecture
IBM Common Cryptographic Architecture information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.5%
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
IBM · Common Cryptographic ArchitectureCVEs relacionadas — IBM Common Cryptographic Architecture
No mesmo produto, das mais perigosas para as menos.
CVE-2023-47150HIGHIBM Common Cryptographic Architecture denial of serviceEPSS 0.6%CVE-2025-13375CRITICALIBM Common Cryptographic Architecture Arbitrary Command ExecutionEPSS 0.5%CVE-2024-22340MEDIUMIBM Common Cryptographic Architecture information disclosureEPSS 0.4%CVE-2024-49823MEDIUMIBM Common Cryptographic Architecture denial of serviceEPSS 0.4%CVE-2024-41760LOWIBM Common Cryptographic Architecture information disclosureEPSS 0.3%