CVE-2016-6322: Red Hat Quickstart Cloud Installer

High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

Affected products

  • Red Hat Quickstart Cloud Installer: affected versions not specified

Published 2016-09-22. Last modified 2026-06-17.