CVE-2015-8559 The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chef | < 15.4.45 | 15.4.45 |
References
- [oss-security] 20151214 Re: Chef: knife bootstrap leaks validator privkey into system logs mailing-list third-party-advisory
- discourse.chef.io
- github.com patch third-party-advisory
- github.com