EUVD-2015-4189

Malware in sbrugna...

Cloudera Key Trustee Server Key Data Disclosure Vulnerability

Cloudera Key Trustee Server is an enterprise-grade virtual safe deposit box for storing and managing encryption keys and other data from Cloudera, USA. A security vulnerability exists in versions of Cloudera Key Trustee Server prior to 5.4.3. An attacker could exploit the vulnerability to obtain...

Design/Logic Flaw

Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key...