Vulnerabilities > CVE-2004-1709 - Local Security vulnerability in Rainbow Ikey2032 Usb Token

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
datakey

Summary

Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users.

Vulnerable Configurations

Part Description Count
Hardware
Datakey
1