CVE-2024-41760: IBM Common Cryptographic Architecture information disclosure
3.7
CVSS
Description
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51
could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
Classification
CVE ID: CVE-2024-41760
CVSS Base Severity: LOW
CVSS Base Score: 3.7
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Problem Types
CWE-203 Observable DiscrepancyAffected Products
Vendor: IBM, IBM
Product: Common Cryptographic Architecture, 4769 Developers Toolkit
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 6.02% (scored less or equal to compared to others)
EPSS Date: 2025-04-08 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2024-41760https://www.ibm.com/support/pages/node/7185282