CVE-2016-5411

Published: Jun 13, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.

Affected (1)

Products: Redhat: Quickstart Cloud Installer

Redhat

1 product

Quickstart Cloud Installer

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redhat Quickstart Cloud Installer	Version 0.9

Running on/with	Platform Versions
Redhat Enterprise Linux	All versions

Related CWEs

CWE-255

References (4)

http://www.securityfocus.com/bid/92669

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1366412

Source: secalert@redhat.com

Issue TrackingVendor Advisory

http://www.securityfocus.com/bid/92669

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1366412

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.