CVE-2015-4166 Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.
CriticalCVSS 9.8
EPSS 0.72%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudera key trustee server | <= 5.4.2 | No fix listed |
References
- www.cloudera.com mitigation vendor-advisory