CVEvulnerability

CVE-2023-33850

7.5 HIGH Published 2023-08-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-203

Description

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.

Affected configurations

• ibm txseries for multiplatform 8.1 • ibm txseries for multiplatform 9.1 • ibm txseries for multiplatform 8.2 • ibm cics tx 11.1 • ibm cics tx 10.1

Related

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

References