CVE-2023-42658

CVSS V2 None CVSS V3 None
Description
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.
Overview
  • CVE ID
  • CVE-2023-42658
  • Assigner
  • ProgressSoftware
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-31T14:08:03.537Z
  • Last Modified Date
  • 2023-10-31T15:14:29.727Z
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
CWE-917 http://cwe.mitre.org/data/definitions/917.html
References
Reference URL Reference Tags
https://docs.chef.io/release_notes_inspec/ release-notes
https://docs.chef.io/inspec/cli/ release-notes
https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Inspec-CVE-2023-42658 vendor-advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-42658
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42658
History
Created Old Value New Value Data Type Notes
2024-06-25 13:40:07 Added to TrackCVE