Approved changes feed: RSS · Atom

cpe:2.3:a:chef:chef:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChef (c00de2d4-178c-5fd2-938c-b22719db34b3)
ProductChef (9baac0f8-7aca-584a-b14b-0dbe392b53c6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/chef/chef purl2cpe 2026-06-01 10:11:02.160085
pkg:gem/chef purl2cpe 2026-06-01 10:11:02.160087
pkg:github/chef/chef purl2cpe 2026-06-01 10:11:02.160088

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8559 vulnerable 2026-06-08 05:07:04.372352 Details available
The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
Published: 2017-09-21T14:00:00.000Z
Updated: 2024-08-06T08:20:43.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.