vulnerability

Ubuntu: (CVE-2015-8559): chef vulnerability

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Sep 21, 2017

Added

Jun 26, 2025

Modified

Jul 28, 2025

Description

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.

no-fix-ubuntu-package

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.