Vulnerabilities > CVE-2006-1116 - Unspecified vulnerability in Ncipher Ncore 2.17

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ncipher
NVD
Published: 2006-03-09
Updated: 2018-10-18

Summary

The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.

Vulnerable Configurations

Part Description Count
Application
Ncipher
1

References