6.5
Medium
CVE-2024-22340 IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive…
Description
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Common Cryptographic Architecture 7.0 | 7.0.0 → 7.5.51 | No fix stated |
| 4769 Developers Toolkit 7.0 | 7.0.0 → 7.5.51 | No fix stated |
Other CVEs of Common Cryptographic Architecture
The 6 CVEs of Common Cryptographic Architecture →
CVE-2025-13375
IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary…
9.8
Critical
CVE-2024-41760
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information…
3.7
Low
CVE-2024-49823
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of…
6.5
Medium
CVE-2023-33855
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36…
3.7
Low