7.5
Élevée
CVE-2023-33850 IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in…
Description
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TXSeries for Multiplatforms | Versions non publiées | |
| CICS TX Standard | 11.1 | Pas de correctif indiqué |
| CICS TX Advanced | Versions non publiées | |
| txseries_for_multiplatform | 9.1 | Pas de correctif indiqué |
| txseries_for_multiplatform | 8.2 | Pas de correctif indiqué |
| txseries_for_multiplatform | 8.1 | Pas de correctif indiqué |
| cics_tx | 11.1 | Pas de correctif indiqué |
Autres CVE de TXSeries for Multiplatforms
Les 20 CVE de TXSeries for Multiplatforms →
CVE-2024-56476
IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login…
5.3
Moyenne
CVE-2024-56475
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2024-56474
IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker…
4.3
Moyenne
CVE-2025-0154
IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper…
5.3
Moyenne