IBM CCA could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.

IBM CCA could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.

IBM CCA could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.

IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596.