CVE-2016-4326

Properties

Published:
08.06.2016
Updated:
10.06.2016
Patch available:
Severity:
High
CVSS vector:
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Product:
chef: chef_manage

Vulnerability description

The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

References:

CERT-VN:http://www.kb.cert.org/vuls/id/586503