← Vulnerability feed

Vulnerability record · CVE-2016-7062 · published 27 June 2017

CVE-2016-7062: Redhat storage console vulnerability

Redhat · Storage Console

rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext.

7.8 CVSS 3.0 High EPSS 0.37% · top 71.4% CWE-255 · CWE-255
7.8CVSS 3.0 base score, v2 2.1
0.37%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/93796 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037062 Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2016:2082 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1381681 Issue TrackingVendor Advisory
http://www.securityfocus.com/bid/93796 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037062 Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2016:2082 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1381681 Issue TrackingVendor Advisory

Track CVE-2016-7062 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-7481Redhat openshift container platform improper input validation vulnerabilityAnsible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of looku…EPSS 4.8%7.0CVE-2017-2665Mongodb insufficiently protected credentials vulnerabilityThe skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file…EPSS 0.33%8.8CVE-2014-1812Microsoft Windows Group Policy Preferences credential exposure and privilege escalationGroup Policy Preferences in multiple Windows versions stored and distributed passwords in a way that did not properly protect them, allowing any auth…KEVEPSS 65%analysed

Source: NIST National Vulnerability Database (record CVE-2016-7062), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.