CVE-2023-40050 | Upload profile either through API or user interface in Chef … | CVSS 9.9 CRITICAL

Description

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

Metadata

CVE ID: CVE-2023-40050
State: PUBLISHED
Assigner: ProgressSoftware
Reserved: 2023-08-08 19:44 UTC
Published: 2023-10-31 14:07 UTC
Last updated: 2024-09-06 15:41 UTC
Primary CWE: CWE-94
CWE-94 Improper Control of Generation of Code ('Code Injecti…
Vendor / Product: Progress Software Corporation / Chef Automate
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Progress Software Corporation	Chef Automate	Linux	4.0.0 ≤ 4.10.29

Weakness (CWE)

CWE	Source	Description
CWE-434	cna	CWE-434 Unrestricted Upload of File with Dangerous Type
CWE-94	cna	CWE-94 Improper Control of Generation of Code ('Code Injection')

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (3)