PT-2017-17557

CVE-2017-7174

·

Published

2017-03-17

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Chef Manage versions 2.1.0 through 2.4.4
Description The user-account creation feature in Chef Manage allows remote attackers to execute arbitrary code. This issue is fixed in version 2.4.5.
Recommendations For versions 2.1.0 through 2.4.4, update to version 2.4.5 to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2017-7174
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com