Paper/Archive/CVE-2023-40050

CVE-2023-40050

Progress Software Corporation Chef Automate — Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application

EPSS 1%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 67.8.678 × 2013.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

Affected

ProductAffectedFixed inSource

Chef Automate4.0.0 – 4.10.29–CNA

automate≤ 4.10.29–CISA-ADP

Scores by source

ProgressSoftware (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdocs.chef.io/release_notes_automate refdocs.chef.io/automate/profiles advisorycommunity.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050