7.5
High
CVE-2023-33850 IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in…
Description
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TXSeries for Multiplatforms | Versions not published | |
| CICS TX Standard | 11.1 | No fix stated |
| CICS TX Advanced | Versions not published | |
| txseries_for_multiplatform | 9.1 | No fix stated |
| txseries_for_multiplatform | 8.2 | No fix stated |
| txseries_for_multiplatform | 8.1 | No fix stated |
| cics_tx | 11.1 | No fix stated |
Other CVEs of TXSeries for Multiplatforms
The 20 CVEs of TXSeries for Multiplatforms →
CVE-2024-56476
IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login…
5.3
Medium
CVE-2024-56475
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting
5.4
Medium
CVE-2024-56474
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker…
4.3
Medium
CVE-2025-0154
IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper…
5.3
Medium