Progress Chef Habitat 安全漏洞

Progress Chef Habitat is an open source solution from Progress, Inc. that provides automation capabilities for defining, packaging, and delivering applications to virtually any environment. Progress Chef Habitat has a security vulnerability that stems from susceptibility to Indirect Object...

Chef Infra Client SEoL (17.x)

According to its version, Chef Infra Client is 17.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Chef Infra Client SEoL (16.x)

According to its version, Chef Infra Client is 16.x or earlier. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVE...

Chef Web UI Brute Force Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/chefwebui' require 'metasploit/framework/credentialcollection' class MetasploitModule 'Chef Web UI Brute Force Utility',...

Malicious code in chef_handler-statsd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6828 Malicious code in chef_handler-statsd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6827 Malicious code in chef_handler-datadog-demo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chef_handler-datadog-demo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chef_cloudsearch (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chef-partial-search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6825 Malicious code in chef-partial-search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Chef Infra Client Installed (Unix)

Binary data chefinfraclientnixinstalled.nbin...

VulnCheck KEV: CVE-2016-4326

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

Chef Infra Client Detection

Binary data chefinfraclientwebdetect.nbin...

Chef Infra Server Detection

Binary data chefinfraserverwebdetect.nbin...

chefkonstantis.com Improper Access Control vulnerability OBB-3795558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-40050

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution...

CVE-2023-42658

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...

Command injection

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...

Remote code execution

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution...