CVE-2026-8100

{
  "id": "CVE-2026-8100",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-18T22:16:32.353",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Impact\n\nA security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass standard access controls gaining additional privileges, potentially allowing access to API endpoints that are intended to be restricted to higher-permissioned roles. The impact is limited to environments where the affected request patterns can be triggered and depends on specific deployment configuration and access controls in place.\nResolution\nThe issue has been addressed through product updates that improve request validation and enforce strict path normalization before authorization checks.  Customers are advised to update to the latest available version containing the fix, version 1.7.1 or later."
    },
    {
      "lang": "es",
      "value": "Impacto\n\nSe ha identificado un problema de seguridad en Chef 360 que podría permitir el acceso no autorizado a puntos finales de API protegidos bajo condiciones específicas. Este problema se debe a un manejo inadecuado de rutas codificadas en URL durante el procesamiento de solicitudes. En ciertos escenarios, una solicitud autenticada podría eludir los controles de acceso estándar obteniendo privilegios adicionales, lo que podría permitir el acceso a puntos finales de API que están destinados a ser restringidos a roles con permisos superiores. El impacto se limita a entornos donde los patrones de solicitud afectados pueden ser activados y depende de la configuración de despliegue específica y los controles de acceso implementados.\n\nResolución\n\nEl problema se ha abordado mediante actualizaciones del producto que mejoran la validación de solicitudes y aplican una normalización estricta de rutas antes de las comprobaciones de autorización. Se aconseja a los clientes actualizar a la última versión disponible que contiene la corrección, versión 1.7.1 o posterior."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Progress Chef",
          "product": "Chef360",
          "defaultStatus": "unaffected",
          "collectionURL": "https://docs.chef.io/360/1.7/",
          "packageName": "api-gateway",
          "modules": [
            "NGINX"
          ],
          "platforms": [
            "Linux",
            "x86",
            "ARM",
            "64 bit"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "1.7.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:M/U:X",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "subAvailabilityImpact": "HIGH",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NEGLIGIBLE",
          "Automatable": "YES",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "MODERATE",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-22T18:11:24.733974Z",
          "id": "CVE-2026-8100",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://community.progress.com/s/article/Authentication-Bypass-via-URL-Encoded-Path-Traversal",
      "source": "[email protected]"
    }
  ]
}