CVE-2015-0235-cookbook

CVE-2015-0235-cookbook This cookbook will test if you are vulnerable to CVE-2015-0235. Current behavior will error out when test fails: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end For debian based systems: CVE-2015-0235 For...

CVE-2014-3566-poodle-cookbook

CVE-2014-3566-poodle This cookbook will error out your chef run if your server is vulnerable to CVE-2014-3566. Although this cookbook can be used to watch for failed chef runs, it is also a proof of concept. Supported Platforms Ubuntu 12.04 Centos-6.4 Attributes Key | Type | Description | Default...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

cookbook-bash-CVE-2014-6271

bash-CVE-2014-6271 Cookbook This Chef cookbook contains a default recipe that will fail your Chef run if a bash is found and that bash is vulnerable to the remote exploit described in CVE-2014-6271. The places to look for bash can be configured in the node'bash-CVE-2014-6271''bashes' attribute se...

chef-os-hardening

os-hardening cookbook de Chef 1 2 Descripción Este cookbook proporciona numerosas configuraciones relacionadas con la seguridad, ofreciendo una protección base integral. Configura: Configura la gestión de paquetes, p. ej. solo permite paquetes firmados Elimina paquetes con problemas conocidos...

chef-ssh-hardening

ssh-hardening Chef cookbook 1 2 3 4 Description This cookbook provides secure ssh-client and ssh-server configurations. This cookbook does not provide capabilities for management of users and/or ssh keys, please use other cookbooks for that. Requirements Chef = 14.13.11 Platform Debian 8, 9, 10...

chef-mysql-hardening

mysql-hardening Chef cookbook Descripción Proporciona configuraciones de seguridad para mysql. Está pensado para configurar instancias de mysql listas para producción que estén configuradas con una superficie mínima para los atacantes. Este cookbook se centra en la configuración de seguridad de...

bash-shellshock

bash-shellshock Cookbook This cookbook is designed to test and optionally remediate the bash "shellshock" bug, more formally known as cve-2014-7169. Once Chef-client has executed this recipe on one or more hosts, a list of all nodes that are vulnerable to the "Shellshock" exploit can be retrieved...

cookbook-update-glibc

cookbook-update-glibc Resumen cookbook para actualizar glibc. CVE-2015-0235 GHOST Japonés http://www.walbrix.com/jp/blog/2015-01-ghost.html Inglés http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Descripción Actualiza glibc mediante Chef Solo. Atención: este cookbook requiere reinici...

chef_tissues

Tissues Install patch for CVE-2017-0145 AKA WannaCry. More Info: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Usage: "name":"mynode", "runlist": "recipetissues"...

EUVD-2021-14363

Malware in sbrugna...

SAP Business One Code Injection Vulnerability (CNVD-2022-58479)

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One Hana Chef Cookbook contains a code injection vulnerability that could be exploited to inject code that can be executed by the application...

SAP Business One Information Disclosure Vulnerability (CNVD-2022-58480)

SAP Business One is a suite of enterprise management software from SAP, a German company. The software includes financial management, operations management and human resources management functions.SAP Business One Chef cookbook contains an information disclosure vulnerability that could be...

CVE-2021-27614

SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the...

CVE-2021-27616

Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted, resulting in...

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

CVE-2021-27614

SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the...

CVE-2021-27616

Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted, resulting in...

Information disclosure

Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted, resulting in...

CVE-2021-27614

SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the...