CVE-2015-4166: Cloudera Key Trustee Server

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.

Affected products

• Cloudera Key Trustee Server: up to and including 5.4.2

Published 2017-03-23. Last modified 2026-06-17.