CVE-2002-0941: Ncipher Nforce

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.

Affected products

• Ncipher Nforce: any version
• Ncipher Nshield: any version

Published 2002-10-04. Last modified 2026-06-16.