nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack.
Max CVSS
2.6
EPSS Score
0.39%
Published
2006-03-09
Updated
2018-10-18
1 vulnerabilities found