CVE-2001-0081 swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncipher | All versions | No fix listed |
References
- active.ncipher.com patch vendor-advisory
- 20001212 nCipher Security Advisory: Operator Cards unexpectedly recoverable mailing-list patch vendor-advisory
- 4849 vdb-entry
- ncipher-recover-operator-cards(5999) vdb-entry