CVE-2023-33850

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-33850", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2023-05-23T00:31:59.438Z", "datePublished": "2023-08-22T20:31:25.923Z", "dateUpdated": "2025-11-03T21:48:43.280Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "TXSeries for Multiplatforms", "vendor": "IBM", "versions": [{"status": "affected", "version": "8.1, 8.2, 9.1"}]}, {"defaultStatus": "unaffected", "product": "CICS TX Standard", "vendor": "IBM", "versions": [{"status": "affected", "version": "11.1"}]}, {"defaultStatus": "unaffected", "product": "CICS TX Advanced", "vendor": "IBM", "versions": [{"status": "affected", "version": "10.1, 11.1"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(204, 217, 226);\">IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.</span>"}], "value": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-203", "description": "CWE-203 Observable Discrepancy", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2024-09-27T13:50:22.398Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7010369"}, {"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7022413"}, {"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7022414"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM GSKit-Crypto information disclosure", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/7010369"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/7022413"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/7022414"}, {"tags": ["vdb-entry", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132"}, {"url": "https://security.netapp.com/advisory/ntap-20241108-0002/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:48:43.280Z"}}, {"affected": [{"vendor": "ibm", "product": "txseries_for_multiplatform", "cpes": ["cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "8.1", "status": "affected"}, {"version": "8.2", "status": "affected"}, {"version": "9.1", "status": "affected"}]}, {"vendor": "ibm", "product": "cics_tx", "cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "11.1", "status": "affected"}, {"version": "10.1", "status": "affected"}]}, {"vendor": "ibm", "product": "cics_tx", "cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "11.1", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-03T19:06:38.589742Z", "id": "CVE-2023-33850", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T19:11:06.469Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.ibm.com/support/pages/node/7010369", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://www.ibm.com/support/pages/node/7022413", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://www.ibm.com/support/pages/node/7022414", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132", "tags": ["vdb-entry", "x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20241108-0002/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:48:43.280Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-33850", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-03T19:06:38.589742Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*"], "vendor": "ibm", "product": "txseries_for_multiplatform", "versions": [{"status": "affected", "version": "8.1"}, {"status": "affected", "version": "8.2"}, {"status": "affected", "version": "9.1"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*"], "vendor": "ibm", "product": "cics_tx", "versions": [{"status": "affected", "version": "11.1"}, {"status": "affected", "version": "10.1"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*"], "vendor": "ibm", "product": "cics_tx", "versions": [{"status": "affected", "version": "11.1"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T19:10:45.702Z"}}], "cna": {"title": "IBM GSKit-Crypto information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "IBM", "product": "TXSeries for Multiplatforms", "versions": [{"status": "affected", "version": "8.1, 8.2, 9.1"}], "defaultStatus": "unaffected"}, {"vendor": "IBM", "product": "CICS TX Standard", "versions": [{"status": "affected", "version": "11.1"}], "defaultStatus": "unaffected"}, {"vendor": "IBM", "product": "CICS TX Advanced", "versions": [{"status": "affected", "version": "10.1, 11.1"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7010369", "tags": ["vendor-advisory"]}, {"url": "https://www.ibm.com/support/pages/node/7022413", "tags": ["vendor-advisory"]}, {"url": "https://www.ibm.com/support/pages/node/7022414", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(204, 217, 226);\">IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-203", "description": "CWE-203 Observable Discrepancy"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2024-09-27T13:50:22.398Z"}}}, "cveMetadata": {"cveId": "CVE-2023-33850", "state": "PUBLISHED", "dateUpdated": "2025-11-03T21:48:43.280Z", "dateReserved": "2023-05-23T00:31:59.438Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2023-08-22T20:31:25.923Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "TXSeries for Multiplatforms", "vendor": "IBM", "versions": [{"status": "affected", "version": "8.1, 8.2, 9.1"}]}, {"defaultStatus": "unaffected", "product": "CICS TX Standard", "vendor": "IBM", "versions": [{"status": "affected", "version": "11.1"}]}, {"defaultStatus": "unaffected", "product": "CICS TX Advanced", "vendor": "IBM", "versions": [{"status": "affected", "version": "10.1, 11.1"}]}], "source": "psirt@us.ibm.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "txseries_for_multiplatform", "vendor": "ibm", "versions": [{"status": "affected", "version": "8.1"}, {"status": "affected", "version": "8.2"}, {"status": "affected", "version": "9.1"}]}, {"cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*"], "defaultStatus": "unaffected", "product": "cics_tx", "vendor": "ibm", "versions": [{"status": "affected", "version": "11.1"}, {"status": "affected", "version": "10.1"}]}, {"cpes": ["cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*"], "defaultStatus": "unaffected", "product": "cics_tx", "vendor": "ibm", "versions": [{"status": "affected", "version": "11.1"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "3D5EA02F-AA81-4101-9CE2-46ED4DE76B25", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "569BF866-989C-4BF4-B80E-962F8979FD8B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89", "vulnerable": false}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "BB032B5B-3B05-4809-8BF2-E08255E19475", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*", "matchCriteriaId": "F480AA32-841A-4E68-9343-B2E7548B0A0C", "vulnerable": false}, {"criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89", "vulnerable": false}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*", "matchCriteriaId": "66EEC046-128D-4555-8C9A-3C02300145B5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*", "matchCriteriaId": "73BBDE39-E8CF-416C-838D-046ADDA011F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*", "matchCriteriaId": "A9D7FDA3-EE60-453B-8651-686B9D28071F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information."}, {"lang": "es", "value": "IBM GSKit-Crypto podr\u00eda permitir a un atacante remoto obtener informaci\u00f3n sensible, causado por un canal lateral basado en tiempo en la implementaci\u00f3n de descifrado RSA. Al enviar un n\u00famero excesivamente grande de mensajes de prueba para el descifrado, un atacante podr\u00eda explotar esta vulnerabilidad para obtener informaci\u00f3n sensible."}], "id": "CVE-2023-33850", "lastModified": "2026-11-10T12:10:00.177", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-33850", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-10-03T19:06:38.589742Z", "version": "2.0.3"}}]}, "published": "2023-08-22T21:15:07.837", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7010369"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7022413"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7022414"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7010369"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7022413"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7022414"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-203"}], "source": "psirt@us.ibm.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-203"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}

{}