CVE-2016-6829

The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.

• CWE-798

• http://www.openwall.com/lists/oss-security/2016/08/16/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/18/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/92476Third Party Advisory, VDB Entry
• https://github.com/crowbar/barclamp-trove/commit/932298f250365fed6963700870e52db3a7a32daaIssue Tracking, Patch
• https://github.com/crowbar/crowbar-openstack/commit/208230bdfbcb19d062149d083b1a66b429516a69Issue Tracking, Patch
• https://www.suse.com/security/cve//CVE-2016-6829.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/08/16/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/18/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/92476Third Party Advisory, VDB Entry
• https://github.com/crowbar/barclamp-trove/commit/932298f250365fed6963700870e52db3a7a32daaIssue Tracking, Patch
• https://github.com/crowbar/crowbar-openstack/commit/208230bdfbcb19d062149d083b1a66b429516a69Issue Tracking, Patch
• https://www.suse.com/security/cve//CVE-2016-6829.htmlPatch, Vendor Advisory

Published

Dec 9, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6823Integer overflow in the BMP coder in ImageMagick before 7.0.…7.5
• CVE-2016-6824Huawei AC6003, AC6005, AC6605, and ACU2 access controllers w…
• CVE-2016-6825Huawei XH620 V3, XH622 V3, and XH628 V3 servers with softwar…
• CVE-2016-6826Huawei AnyMail before 2.6.0301.0060 allows remote attackers …
• CVE-2016-6827Huawei FusionCompute before V100R005C10CP7002 stores clearte…
• CVE-2016-6828The tcp_check_send_head function in include/net/tcp.h in the…
• CVE-2016-6830The "process-execute" and "process-spawn" procedures in CHIC…
• CVE-2016-6831The "process-execute" and "process-spawn" procedures did not…
• CVE-2016-6832Heap-based buffer overflow in the ff_audio_resample function…
• CVE-2016-6833Use-after-free vulnerability in the vmxnet3_io_bar0_write fu…4.4
• CVE-2016-6834The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx…4.4
• CVE-2016-6835The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx…6