CVE-2016-6340 The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force a...
HighCVSS 8.4
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat quickstart cloud installer | All versions | No fix listed |
References
- 92655 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking vdb-entry vendor-advisory