Chef Manage

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-7174	Chef Chef Manage	Cri	0.64	9.8	0.02		Mar 17, 2017	The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5.
CVE-2016-4326	Chef Chef Manage	Cri	0.64	9.8	0.04		Jun 10, 2016	The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

CVE-2017-7174CriMar 17, 2017
Chef
Chef Manage
risk 0.64cvss 9.8epss 0.02
The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5.
CVE-2016-4326CriJun 10, 2016
Chef
Chef Manage
risk 0.64cvss 9.8epss 0.04
The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.