CVE-2024-41760: IBM Common Cryptographic Architecture

Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.

Affected products

• IBM Common Cryptographic Architecture: from 7.0.0, before 7.5.52 (fixed in 7.5.52)

Published 2025-03-11. Last modified 2026-06-17.