CVE-2024-49823CWE-787
IBM Common Cryptographic Architecture denial of service
Medium · published March 11, 2025
What it is
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00384 · 31.2th percentile
- Weakness
- CWE-787 · Out-of-bounds Write
- Published
- 2025-03-11T00:48Z
EPSS history
Timeline