Lucene search

[email protected]NVD:CVE-2023-33850

HistoryAug 22, 2023 - 9:15 p.m.

CVE-2023-33850

2023-08-2221:15:07

CWE-203

[email protected]

web.nvd.nist.gov

ibm

gskit-crypto

rsa

decryption

vulnerability

remote attacker

sensitive information

timing-based

side channel

x-force id

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.

Affected configurations

NVD

Node

ibmtxseries_for_multiplatformMatch8.1

ibmtxseries_for_multiplatformMatch9.1

AND

ibmaixMatch-

linuxlinux_kernelMatch-

Node

ibmtxseries_for_multiplatformMatch8.2

AND

hphp-uxMatch-

ibmaixMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

Node

ibmcics_txMatch11.1standard

AND

linuxlinux_kernelMatch-

Node

ibmcics_txMatch10.1advanced

ibmcics_txMatch11.1advanced

AND

linuxlinux_kernelMatch-

References

exchange.xforce.ibmcloud.com/vulnerabilities/257132

www.ibm.com/support/pages/node/7010369

www.ibm.com/support/pages/node/7022413

www.ibm.com/support/pages/node/7022414

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for NVD:CVE-2023-33850

prion1 ibm88 cvelist1 cve1 nessus5 aix1 openvas1