CVE-2016-4326

The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cret@cert.org

Published

2016-06-10

Last modified

2024-08-06

Affected products

• Chef Manage (Chef)

References

• http://www.kb.cert.org/vuls/id/586503