PT-2017-6740

CVE-2015-4166

·

Published

2017-03-23

·

Updated

2017-03-27

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Cloudera Key Trustee Server versions prior to 5.4.3
Description The issue is related to the storage of keys, where keys are not stored synchronously, potentially allowing attackers to have an unspecified impact via vectors related to loss of an encryption key.
Recommendations For versions prior to 5.4.3, update to version 5.4.3 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-320
Related identifiers
CVE-2015-4166
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com