PT-2016-6832 · Red Hat · Red Hat Quickstart Cloud Installer

Kurt Seifried · Published 2016-09-22 · Updated 2016-09-22 · CVE-2016-6340

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer (QCI) (affected versions not specified)

Description The issue in Red Hat QuickStart Cloud Installer (QCI) involves the kickstart file forcing the use of MD5 passwords on deployed systems. This makes it easier for attackers to determine cleartext passwords via a brute-force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-6340

Affected Products

Red Hat Quickstart Cloud Installer

References · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=1370315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6340 · Security Note
• http://securityfocus.com/bid/92655 · Note