Unscored CVE-2001-0081 EUVD-2001-0081GHSA-grp9-jgmj-h7px

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could a…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.

References

20001212 nCipher Security Advisory: Operator Cards unexpectedly recoverable mailing-list
ncipher-recover-operator-cards(5999) vdb-entry
http://active.ncipher.com/updates/advisory.txt
4849 vdb-entry