Skip to content

CVE-2016-4326 The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

CriticalCVSS 9.8 EPSS 4.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

Affected products

ProductAffected versionsFixed in
chef manage <= 1.11.4 No fix listed

References

  • VU#586503 third-party-advisory us-government-resource