Export limit exceeded: 10244 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2016-5411

QCI: creates world readable /var/lib/ovirt-engine/setup/engine-DC-config.py contains sensitive password

/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Quickstart Cloud Installer
CVE-2016-7060

QCI: qci exposes password in web UI when they should be masked

The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Qci Quickstart Cloud Installer
CVE-2016-6322

QCI: creates world readable /etc/qci/answers contains sensitive password

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

CVSS 3.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Quickstart Cloud Installer
CVE-2016-6340

QCI: uses MD5 as password hash algorithm on deployed systems

The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack.

CVSS 3.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Quickstart Cloud Installer