CVE-2024-41760 - Vulnerability Details - OpenCVE

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	4769

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7185282

History

Tue, 11 Mar 2025 02:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 11 Mar 2025 01:00:00 +0000

Type	Values Removed	Values Added
Description		IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
Title		IBM Common Cryptographic Architecture information disclosure
First Time appeared		Ibm Ibm 4769
Weaknesses		CWE-203
CPEs		cpe:2.3:h:ibm:4769:-:::::::*
Vendors & Products		Ibm Ibm 4769
References		https://www.ibm.com/support/pages/node/7185282
Metrics		cvssV3_1 `{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-03-11T00:49:35.514Z

Updated: 2025-03-11T02:01:46.174Z

Reserved: 2024-07-22T12:02:49.315Z

Link: CVE-2024-41760

Vulnrichment

Updated: 2025-03-11T02:01:41.748Z

NVD

Status : Received

Published: 2025-03-11T01:15:33.427

Modified: 2025-03-11T01:15:33.427

Link: CVE-2024-41760

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-41760", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-07-22T12:02:49.315Z", "datePublished": "2025-03-11T00:49:35.514Z", "dateUpdated": "2025-03-11T02:01:46.174Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:h:ibm:4769:-:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "platforms": ["Linux x86", "IBM AIX", "IBM i", "IBM PowerLinux"], "product": "Common Cryptographic Architecture", "vendor": "IBM", "versions": [{"lessThanOrEqual": "7.5.51", "status": "affected", "version": "7.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "4769 Developers Toolkit", "vendor": "IBM", "versions": [{"lessThanOrEqual": "7.5.51", "status": "affected", "version": "7.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 \n\n<span style=\"background-color: rgb(255, 255, 255);\">could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.</span>"}], "value": "IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 \n\ncould allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-203", "description": "CWE-203 Observable Discrepancy", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-03-11T00:49:35.514Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7185282"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Common Cryptographic Architecture information disclosure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-11T02:01:29.825716Z", "id": "CVE-2024-41760", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-11T02:01:46.174Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41760", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-11T02:01:29.825716Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-11T02:01:41.748Z"}}], "cna": {"title": "IBM Common Cryptographic Architecture information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:h:ibm:4769:-:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Common Cryptographic Architecture", "versions": [{"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.5.51"}], "platforms": ["Linux x86", "IBM AIX", "IBM i", "IBM PowerLinux"], "defaultStatus": "unaffected"}, {"vendor": "IBM", "product": "4769 Developers Toolkit", "versions": [{"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.5.51"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7185282", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 \n\ncould allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.", "supportingMedia": [{"type": "text/html", "value": "IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 \n\n<span style=\"background-color: rgb(255, 255, 255);\">could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-203", "description": "CWE-203 Observable Discrepancy"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-03-11T00:49:35.514Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41760", "state": "PUBLISHED", "dateUpdated": "2025-03-11T02:01:46.174Z", "dateReserved": "2024-07-22T12:02:49.315Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-03-11T00:49:35.514Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}