Description (CNA)
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Common Cryptographic Architecture | affected 7.0.0 through 7.5.36 |
CWE
CWE-385
References
- https://www.ibm.com/support/pages/node/7145168
- https://exchange.xforce.ibmcloud.com/vulnerabilities/257676
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.