← All advisories

High severity7.5NVD Advisory· Published Sep 21, 2017· Updated Jun 17, 2026

CVE-2015-8559

CVE-2015-8559

Description

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Chef/Chefreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:chef:chef:*:*:*:*:*:*:*:*range: <15.4.45
- (no CPE)range: <15.4.45
Chef/chef Infra clientllm-create
Range: <15.4.45

Patches

Vulnerability mechanics

References

4

github.com/chef/chef/issues/3871nvdPatchThird Party Advisory
www.openwall.com/lists/oss-security/2015/12/14/14nvdMailing ListThird Party Advisory
discourse.chef.io/t/chef-infra-client-15-4-45-released/16081nvd
github.com/chef/chef/pull/8885nvd

News mentions

0

No linked articles in our index yet.