CVE-2002-0941

State: Published
Severity: Not scored
Published: Apr 2, 2003
Updated: Aug 8, 2024
Reserved: Aug 16, 2002

Description

The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

ncipher-consolecallback-passphrase-leak(9354)vdb-entry
20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windowsmailing-list
5024vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.