Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-22340 EUVD-2024-19901GHSA-c929-wgpc-h7f5

IBM Common Cryptographic Architecture information disclosure

Published Mar 11, 2025 · Updated Sep 1, 2025 · Assigned by ibm

Description

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51

could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.

Affected products

VendorProductAffectedFixed
IBM Common Cryptographic Architecture 7.0.0 – ≤ 7.5.51 —
IBM 4769 Developers Toolkit 7.0.0 – ≤ 7.5.51 —

References