CVEvulnerability
CVE-2016-6340
8.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-09-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-254
Description
The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack.
Affected configurations
• redhat quickstart cloud installer
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/92655 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1370315 Issue Tracking, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/92655 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1370315 Issue Tracking, VDB Entry, Vendor Advisory