Unrated severityNVD Advisory· Published Aug 1, 2002· Updated Apr 16, 2026
CVE-2002-1446
CVE-2002-1446
Description
The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages.
Affected products
1- cpe:2.3:a:ncipher:pkcs_11_library:1.2.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.