Back to Database
Status published
Medium
CVE-2002-0941
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and...
Vulnerability Description
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0941
Credits & Attribution
No credits recorded in the NVD database.
References
More from ncipher
View All →CVE-2006-1117
nCipher firmware before V10, as used by (1) nShield, (2)...
Low
2.6
CVE-2006-1116
The CBC-MAC integrity functions in the nCipher nCore API before...
Medium
5
CVE-2006-1115
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key...
Low
2.6
CVE-2004-0320
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through...
Low
2.1
CVE-2004-0063
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18...
High
7.5
Affected Vendor
ncipher
View all reports →Affected Software
nforce, nshield
Vulnerable Versions:
Unknown
Timeline
Official Publish:
April 2nd, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.