⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2016-6322

HIGH · 8.4 CVSS Gepubliceerd: 22-09-2016 CWE-264

Beschrijving

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

Vendors

Redhat

Affected products

Quickstart Cloud Installer Enterprise Linux

References

www.securityfocus.com
bugzilla.redhat.com