CVE-2004-0063

The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status…

published September 1, 2004

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01326 · 70.7th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status…
    cvelistv5