VYPR
← All advisories
High severity7.5NVD Advisory· Published May 30, 2023· Updated Jun 17, 2026

CVE-2023-32342

CVE-2023-32342

Description

IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 255828.

Affected products

3
  • IBM/HTTP Server
    cpe:2.3:a:ibm:http_server:*:*:*:*:*:*:*:*
    Range: >=8.5.0.0,<8.5.5.24
  • IBM/GSKitllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range:

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.