Lucene search

K
redhatRedHatRHSA-2017:0256
HistoryFeb 07, 2017 - 1:18 a.m.

(RHSA-2017:0256) Moderate: tfm-rubygem-fusor_ui security update

2017-02-0701:18:57
access.redhat.com
30

EPSS

0.001

Percentile

38.8%

QuickStart Cloud Installer (QCI) is designed to drastically simplify the deployment experience of provisioning your private cloud infrastructure by orchestrating the installation work flow across different products. Instead of installing each product separately, QCI provides an intuitive, web-based graphical user interface to provision a fully functional cloud environment based on the combination of products selected by the user.

Security Fix(es):

  • It was found that several password fields in QCI failed to properly mask the password while it was being entered. An attacker with physical access or the ability to view the screen would be able to see the passwords as they are being entered, allowing them to later access accounts and services protected by those passwords. (CVE-2016-7060)

This issue was discovered by QCI QE Team (Red Hat).

EPSS

0.001

Percentile

38.8%