CVE-2011-5098 in Chef Infra
요약 (영어)
chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to bypass intended access restrictions by leveraging read permission for the validation key and executing a knife client create command with the --admin option.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2012. 08. 08.
공개
2012. 08. 08.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 61517 | Opscode Chef Infra Access Restriction 권한 상승 | 264 | 정의되지 않음 | 공식 수정 | CVE-2011-5098 |