PT-2017-9082 · Red Hat · Red Hat Quickstart Cloud Installer

Kurt Seifried · Published 2017-04-14 · Updated 2017-04-25 · CVE-2016-7060

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer (QCI) version 1.0

Description The issue concerns the web interface of the affected software, where password fields are not masked. This allows physically proximate attackers to obtain sensitive password information by reading the display.

Recommendations For Red Hat QuickStart Cloud Installer (QCI) version 1.0, consider implementing password masking in the web interface to prevent unauthorized access to sensitive information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-7060

RHSA-2017:0256

Affected Products

Red Hat Quickstart Cloud Installer

References · 5

• https://osv.dev/vulnerability/CVE-2016-7060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7060 · Security Note
• https://access.redhat.com/errata/RHSA-2017:0256 · Vendor Advisory
• http://securityfocus.com/bid/97678 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1379909 · Note