CVE-2016-7062
Fixed in a distro release EPSS <1%
rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext.
Products: redhat storage_console, redhat storage_console_node
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhscon 2 | carbon-selinux | 0:0.0.45-1.el7scon |
| Red Hat rhscon 2 | ceph-ansible | 0:1.0.5-34.el7scon |
| Red Hat rhscon 2 | ceph-installer | 0:1.0.15-2.el7scon |
| Red Hat rhscon 2 | rhscon-agent | 0:0.0.19-1.el7scon |
| Red Hat rhscon 2 | rhscon-ceph | 0:0.0.43-1.el7scon |
| Red Hat rhscon 2 | rhscon-ceph-debuginfo | 0:0.0.43-1.el7scon |
| Red Hat rhscon 2 | rhscon-core | 0:0.0.45-1.el7scon |
| Red Hat rhscon 2 | rhscon-core-debuginfo | 0:0.0.45-1.el7scon |
| Red Hat rhscon 2 | rhscon-core-selinux | 0:0.0.45-1.el7scon |
| Red Hat rhscon 2 | rhscon-ui | 0:0.0.60-1.el7scon |
| Red Hat rhscon 2 | salt-selinux | 0:0.0.45-1.el7scon |