What’s Vulnerable › Vulnerabilities

CVE-2015-4166

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-23 · updated 2026-06-17
• Weakness: CWE-320

Description

Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.

Affected products

• Cloudera Key Trustee Server: through 5.4.2

References

• https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_jpc_mwm_js
• https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_jpc_mwm_js

Get alerted when CVE-2015-4166 or the next vulnerability affects your stack