NetSight
IP …
high7.5

CVE-2023-33850

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation.

Impact

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.

Affected products

VendorProductAffected versions
IbmTxseries For Multiplatform
Versions 8.1, 9.1, 8.2
IbmCics Tx
Versions 11.1, 10.1

Weakness classification

CWE-203

References