CVE-2006-1115
Low
Description
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack.
SeverityLow
CVSS2.6
Exploit probability—
ProductNcipher Software Cd
PublishedMar 9, 2006
First seenMar 9, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncipher ncipher_software_cd | No range specified | — |
| ncipher chil | No range specified | — |
| ncipher mscapi_csp | 5.50, 5.54 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.