Description (CNA)
The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/97678
- https://access.redhat.com/errata/RHSA-2017:0256
- https://bugzilla.redhat.com/show_bug.cgi?id=1379909
ADP enrichment
No English description supplied.