EUVD-2016-6356

Malware in sbrugna...

Information Disclosure

tfm-rubygem-fusorui is vulnerable to information disclosure attacks. The vulnerability exists as the web interface in Red Hat QuickStart Cloud Installer QCI 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the...

CVE-2016-5411

/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...

PT-2017-8721

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI versions prior to 1.0 GA Description The issue concerns a file, /var/lib/ovirt-engine/setup/engine-DC-config.py, created by Red Hat QuickStart Cloud Installer QCI that is world readable and contains the...

CVE-2016-5411: Undefined Security Weakness

/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...

Design/Logic Flaw

The web interface in Red Hat QuickStart Cloud Installer QCI 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display...

CVE-2016-7060

CVE-2016-7060 describes a information-disclosure risk in Red Hat QuickStart Cloud Installer (QCI) 1.0 where the web interface does not mask password fields, enabling a physically proximate attacker to read passwords from the display. The CVSSv2/2.0 base score is 2.1 (LOW) with LOCAL attack vector...

PT-2017-9082

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI version 1.0 Description The issue concerns the web interface of the affected software, where password fields are not masked. This allows physically proximate attackers to obtain sensitive password...

CVE-2016-7060: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in Red Hat QuickStart Cloud Installer QCI 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display...

CVE-2016-6322

Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file...

CVE-2016-6322

Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file...

PT-2016-6827

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI affected versions not specified Description The issue concerns the Red Hat QuickStart Cloud Installer QCI using world-readable permissions for the /etc/qci/answers file. This allows local users to obtain...

PT-2016-6832

Name of the Vulnerable Software and Affected Versions Red Hat QuickStart Cloud Installer QCI affected versions not specified Description The issue in Red Hat QuickStart Cloud Installer QCI involves the kickstart file forcing the use of MD5 passwords on deployed systems. This makes it easier for...

CVE-2016-6322: Undefined Security Weakness

Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file...

CVE-2016-6340: Undefined Security Weakness

The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...

CVE-2016-6340

The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...