CVE-2001-0081

Description

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/5999

http://www.osvdb.org/4849

http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html

http://active.ncipher.com/updates/advisory.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS