CVE-2015-4166

Critical

Published: 23/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.

Risk Assessment

Loss of an encryption key could lead to serious security implications for data within the organization, including unauthorized disclosure.

Recommendation

It is recommended to upgrade the Cloudera Key Trustee Server to version 5.4.3 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.