Description
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:P/I:N/A:NAffected software
No affected versions have been published.
Timeline
- Published
- Feb 12, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified