PT-2016-6832 · Red Hat · Red Hat Quickstart Cloud Installer

Kurt Seifried · Publicado 2016-09-22 · Atualizado 2016-09-22 · CVE-2016-6340

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer (QCI) (affected versions not specified)

Description The issue in Red Hat QuickStart Cloud Installer (QCI) involves the kickstart file forcing the use of MD5 passwords on deployed systems. This makes it easier for attackers to determine cleartext passwords via a brute-force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-6340

Produtos afetados

Red Hat Quickstart Cloud Installer

Referências · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=1370315 · Aviso do Fabricante
• http://securityfocus.com/bid/92655 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6340 · Nota de Segurança