CVE-2016-7060 in Red Hat QuickStart Cloud Installer
Summary
The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.
Reservation
08/23/2016
Disclosure
04/14/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 99888 | Red Hat QuickStart Cloud Installer Web Mask information disclosure | 200 | Not defined | Not defined | CVE-2016-7060 |