All packages
Red Hat QuickStart Cloud Installer (QCI) vulnerabilities
3 known CVE vulnerabilities in Red Hat QuickStart Cloud Installer (QCI), translated and rated.
- CVE-2016-6340High
The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces the use of MD5 passwords on deployed systems, making it easier for attackers to determine cleartext passwords via a brute-force attack.
- CVE-2016-6322High
Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for the /etc/qci/answers file, allowing local users to obtain the root password for the deployed system by reading the file.
- CVE-2016-5411Critical
The engine-DC-config.py script in Red Hat QuickStart Cloud Installer (QCI) before version 1.0 GA is world readable and contains the root password of the deployed system.