Unmasked Password Fields in Red Hat QuickStart Cloud Installer (QCI) 1.0

CVE-2016-7060 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display.

Learn more about our Web App Pen Testing.