CVE: CVE-2004-0063

Export to Word

The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00602
Percentile: 0.68519

CVSS Scoring

CVSS v2 Score: 7.5

Severity:

Affected Products

← Back to Home