Read the docs

Opscode

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Opscode records in CISA KEV

No Opscode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chef 3 records LOW

Records

3 records

TI-2011-04375 CVE-2011-5098 · GHSA-q923-fjjc-9frg

chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and…

Priority LOW 32

chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01681 Published 2012-08-08 No fix listed CWE-264
TI-2010-04840 CVE-2010-5142 · GHSA-f68m-q26r-64f6

chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require…

Priority LOW 32

chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user acco…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0157 Published 2012-08-08 Fixed in 0.9.0 CWE-264
TI-2011-04374 CVE-2011-5097 · GHSA-67p8-9f9j-9rxq

chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and…

Priority LOW 28

chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative privileges for the update and destroy methods, which allows remote authenticate…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01423 Published 2012-08-08 No fix listed CWE-264
Open these records in search →