CVEvulnerability
CVE-2001-0081
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
Affected configurations
• ncipher ncipher
Related
Referenced by CWE · observed example (1)
- CWE-449 The UI Performs the Wrong Action weakness
References
- http://active.ncipher.com/updates/advisory.txt Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html Patch, Vendor Advisory
- http://www.osvdb.org/4849 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999 exchange.xforce.ibmcloud.com
- http://active.ncipher.com/updates/advisory.txt Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html Patch, Vendor Advisory
- http://www.osvdb.org/4849 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999 exchange.xforce.ibmcloud.com