Chef Habitat Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:progress_software_corporation:chef_habitat_builder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Progress Software Corporation (936a4410-8e02-5d5c-938a-4a1509e8d7ef) |
|---|---|
| Product | Chef Habitat Builder (59505938-39d3-5ec0-bac2-5bb9109af990) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9825 |
vulnerable | 2026-06-08 07:00:28.722353 |
The Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access token
MEDIUM (5.4)
The Chef Habitat builder-api on-prem-builder package with any version lower than habitat/builder-api/10315/20240913162802 is vulnerable to indirect object reference (IDOR) by un-authorized deletion of personal token. Habitat builder consumes builder-api habitat package as a dependency and the vulnerability was specifically due to builder-api habitat package.
The fix was made available in habitat/builder-api/10315/20240913162802 and all the subsequent versions after that. We would recommend user to always use on-prem stable channel.
Published: 2024-10-28T18:42:39.786Z
Updated: 2024-10-29T13:33:52.268Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.