CVE-2016-5411 /var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat quickstart cloud installer | = 0.9 | No fix listed |
References
- 92669 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking vendor-advisory