CVE-2017-7174

Published: Mar 17, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5.

Products: Chef Manage Project: Chef Manage

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Chef Manage Project Chef Manage	Version 2.1.0
Chef Manage Project Chef Manage	Version 2.1.1
Chef Manage Project Chef Manage	Version 2.1.2
Chef Manage Project Chef Manage	Version 2.2.0
Chef Manage Project Chef Manage	Version 2.2.1
Chef Manage Project Chef Manage	Version 2.3.0
Chef Manage Project Chef Manage	Version 2.4.0
Chef Manage Project Chef Manage	Version 2.4.1
Chef Manage Project Chef Manage	Version 2.4.2
Chef Manage Project Chef Manage	Version 2.4.3
Chef Manage Project Chef Manage	Version 2.4.4

Source: cve@mitre.org

Source: cve@mitre.org

Release NotesThird Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

No history available yet.