The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
Max CVSS
4.6
EPSS Score
0.05%
Published
2002-10-04
Updated
2008-09-05
1 vulnerabilities found