Vulnerabilidades de Progress Software Chef Automate (CVE)

Registros CVE publicados para Progress Software Chef Automate, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
10.0Crítica
CVE-2026-80462

Privilege Escalation in Progress Chef Automate

Progress Software Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

2.0%EPSS
9.8Crítica
CVE-2025-8868

Chef Automate compliance service SQL Injection Vulnerability

Progress Software Chef Automate

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a …

28%EPSS
8.8Alta
CVE-2025-6724

Chef Automate SQL Injection Vulnerability

Progress Software Chef Automate

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.