CVE-2017-7174

Critical

Published: 17/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The user-account creation feature in Chef Manage versions 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This issue is fixed in version 2.4.5.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise.

Recommendation

It is recommended to upgrade Chef Manage to version 2.4.5 or later to mitigate this vulnerability.

Original NVD description (English source)

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5.