Skip to content
OpenAdvisories

Product · Progress Software

Chef Inspec

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.8

    Untrusted user data can lead to privilege escalation

    Chef InSpec versions up to 5.23 and before 7.0.107 creates named pipes with overly permissive default Windows access controls. A local attacker may interfere with the pipe connection process and exploit the insufficient access restrictions to assume the InSpe…