CVE-2015-8559

State: Published
Severity: Not scored
Published: Sep 21, 2017
Updated: Aug 6, 2024
Reserved: Dec 14, 2015

Description

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20151214 Re: Chef: knife bootstrap leaks validator privkey into system logsmailing-list
https://github.com/chef/chef/issues/3871
https://discourse.chef.io/t/chef-infra-client-15-4-45-released/16081
https://github.com/chef/chef/pull/8885

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.