CVE-2016-6322

Опубликовано: 22 сент. 2016

Источник: nvd

CVSS3: 8.4

CVSS2: 7.2

EPSS Низкий

Описание

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

Ссылки

http://www.securityfocus.com/bid/92668
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1366413
Issue Tracking
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/92668
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1366413
Issue Tracking
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:redhat:quickstart_cloud_installer:-:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:-:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00041

Низкий

8.4 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2016-6322

CVSS3: 7.1

redhat

больше 9 лет назад

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

GHSA-pj28-mf5p-43mf

CVSS3: 8.4

github

больше 3 лет назад

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

EPSS

Процентиль: 12%

0.00041

Низкий

8.4 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264