CVE-2016-7060 The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the di...
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat quickstart cloud installer | = 1.0 | No fix listed |
References
- 97678 third-party-advisory vdb-entry
- RHSA-2017:0256 vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry