Jumpdrive Secure contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to the encrypted passwords by accessing the encrypted password file from its publicly accessible location, which may lead to a loss of confidentiality. It is possible to gain access to the unencrypted passwords by attempting to log on to the drive with a debugger attached, which may lead to a loss of confidentiality.
Classification
Location:
Physical Access Required
Attack Type:
Cryptographic,
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
OSVDB:
Best Practice
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
atstake.com - @Stake, Inc.