IBM CCA could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.

IBM CCA could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.

IBM CCA could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module (HSM) due to improper memory allocation of an excessive size.

IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.