CVE-2016-6340

—

CVSS 3.0

8.4 high

EPSS

<1%p32

Published

Sep 22, 2016 (Sep 22, 2016)

Modified

Jun 17, 2026

Description

The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack.

Vendors: redhat
Products: quickstart cloud installer
Weakness: CWE-254
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.