QwikSec

Security Database

CVE

CWE

Training

CVE-2002-0941

Published: Apr 2, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

ncipher-consolecallback-passphrase-leak(9354)

vdb-entry

x_refsource_XF

20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windows

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.