CVE-2016-4326

Critical

Published: 10/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Chef Manage add-on before version 1.12.0 allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to upgrade to version 1.12.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie.