Quickstart Cloud Installer (Redhat) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2017-06-13. Vendor: Redhat.

CVEs of Quickstart Cloud Installer

• CVE-2016-5411 - CVSS 9.8 (critical), 2017-06-13: /var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root…
• CVE-2016-7060 - CVSS 4.6 (medium), 2017-04-14: The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain…
• CVE-2016-6340 - CVSS 8.4 (high), 2016-09-22: The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to…
• CVE-2016-6322 - CVSS 8.4 (high), 2016-09-22: Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the…