CVE-2024-22340

Name of the Vulnerable Software and Affected Versions IBM Common Cryptographic Architecture versions 7.0.0 through 7.5.51

Description The issue could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.

Recommendations For versions 7.0.0 through 7.5.51, update to a version that contains a fix for this issue to prevent a remote attacker from obtaining sensitive information.