Vulnerability Details CVE-2001-0081
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://active.ncipher.com/updates/advisory.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
- http://active.ncipher.com/updates/advisory.txt
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999