The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive.

References

• https://nvd.nist.gov/vuln/detail/CVE-2006-7142
• http://www.securityfocus.com/archive/1/448598/100/0/threaded
• http://www.securityfocus.com/archive/1/449120/100/0/threaded
• http://www.securityfocus.com/bid/20529
• http://www.utimaco.fi/servlets/ActionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaisteksti.jsp?ws3_page_id=tiedoteartikkeli_103&form_id=&component_id=linkin_dokumentti_104