CVE-2016-7060
QCI: qci exposes password in web UI when they should be masked
The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.
CVSS 3.0 · 4.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products