1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content




StorageCrypt Insecure Disk Encryption Security Issue

Report ID: SA30471
Source: Secunia
Date of Discovery: 06.06.2008
Criticality: Negligible
Affects:
StorageCrypt 2.x

Compromise From: Local system
Compromise Type: Exposure of sensitive information

Summary

A security issue has been discovered in StorageCrypt, which can potentially be exploited by malicious people to disclose sensitive information.

Detailed Description

A security issue has been discovered in StorageCrypt, which can potentially be exploited by malicious people to disclose sensitive information.

The security issue is caused due to the application not properly encrypting a disk and can be exploited to disclose the content of files on an encrypted disk.

The security issue is confirmed in version 2.0.1. Other versions may also be affected.

Solution

Use another product.