Lucene search
MitreCVE-2003-1417HistoryOct 20, 2007 - 10:00 a.m.
CVE-2003-1417
2007-10-2010:00:00
CWE-255
mitre
web.nvd.nist.gov
25
ncipher
support software
vulnerability
local access
key.pem
key.der
nvd
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0
Percentile
5.1%
nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the (1) key.pem or (2) key.der files.
Affected configurations
Node
nciphersupport_softwareMatch6.00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ncipher | support_software | 6.00 | cpe:2.3:a:ncipher:support_software:6.00:*:*:*:*:*:*:* |
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2003-1417