VulnerabilityModified
CVE-2001-0081
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
MEDIUM 5.0EPSS 1.39%
Does this matter?
Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.
Description
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.39% probability · 71th percentile
- CISA KEV
- Not listed
- Affected
- ncipher/ncipher
- Source
- cve@mitre.org
References
- http://active.ncipher.com/updates/advisory.txtPatch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.htmlPatch, Vendor Advisory
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
- http://active.ncipher.com/updates/advisory.txtPatch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.htmlPatch, Vendor Advisory
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.