Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Chef records in CISA KEVNo Chef vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01929 · Published 2017-09-21 · No fix listed CWE-200
