PT-2017-9082 · Red Hat · Red Hat Quickstart Cloud Installer

Kurt Seifried · Publicado 2017-04-14 · Atualizado 2017-04-25 · CVE-2016-7060

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer (QCI) version 1.0

Description The issue concerns the web interface of the affected software, where password fields are not masked. This allows physically proximate attackers to obtain sensitive password information by reading the display.

Recommendations For Red Hat QuickStart Cloud Installer (QCI) version 1.0, consider implementing password masking in the web interface to prevent unauthorized access to sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-7060

RHSA-2017:0256

Produtos afetados

Red Hat Quickstart Cloud Installer

Referências · 5

• http://securityfocus.com/bid/97678 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1379909 · Nota
• https://osv.dev/vulnerability/CVE-2016-7060 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7060 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2017:0256 · Aviso do Fabricante