CVE-2025-6724

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-6724", "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", "state": "PUBLISHED", "assignerShortName": "ProgressSoftware", "dateReserved": "2025-06-26T14:25:25.968Z", "datePublished": "2025-09-29T11:29:42.695Z", "dateUpdated": "2025-09-29T13:02:01.775Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/chef/automate", "defaultStatus": "affected", "packageName": "Chef Automate services", "platforms": ["Linux", "64 bit", "x86"], "product": "Chef Automate", "repo": "https://github.com/chef/automate", "vendor": "Progress Software", "versions": [{"lessThan": "4.13.295", "status": "affected", "version": "0", "versionType": "Customer on-premises deployed product"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.</p>\n\n<br>"}], "value": "In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command."}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", "shortName": "ProgressSoftware", "dateUpdated": "2025-09-29T11:29:42.695Z"}, "references": [{"url": "https://docs.chef.io/release_notes_automate/#4.13.295"}], "source": {"discovery": "EXTERNAL"}, "title": "Chef Automate SQL Injection Vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-29T13:01:53.269431Z", "id": "CVE-2025-6724", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-29T13:02:01.775Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-6724", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-29T13:01:53.269431Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-29T13:01:56.465Z"}}], "cna": {"title": "Chef Automate SQL Injection Vulnerability", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/chef/automate", "vendor": "Progress Software", "product": "Chef Automate", "versions": [{"status": "affected", "version": "0", "lessThan": "4.13.295", "versionType": "Customer on-premises deployed product"}], "platforms": ["Linux", "64 bit", "x86"], "packageName": "Chef Automate services", "collectionURL": "https://github.com/chef/automate", "defaultStatus": "affected"}], "references": [{"url": "https://docs.chef.io/release_notes_automate/#4.13.295"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.", "supportingMedia": [{"type": "text/html", "value": "<p>In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.</p>\n\n<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", "shortName": "ProgressSoftware", "dateUpdated": "2025-09-29T11:29:42.695Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6724", "state": "PUBLISHED", "dateUpdated": "2025-09-29T13:02:01.775Z", "dateReserved": "2025-06-26T14:25:25.968Z", "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", "datePublished": "2025-09-29T11:29:42.695Z", "assignerShortName": "ProgressSoftware"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/chef/automate", "defaultStatus": "affected", "packageName": "Chef Automate services", "platforms": ["Linux", "64 bit", "x86"], "product": "Chef Automate", "repo": "https://github.com/chef/automate", "vendor": "Progress Software", "versions": [{"lessThan": "4.13.295", "status": "affected", "version": "0", "versionType": "Customer on-premises deployed product"}]}], "source": "security@progress.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*", "matchCriteriaId": "A0808A5D-2AB3-4BA9-980F-257510F81F64", "versionEndExcluding": "4.13.295", "vulnerable": true}, {"criteria": "cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*", "matchCriteriaId": "D98232AE-823F-4030-AB0E-AFF82839F5BA", "versionEndIncluding": "20220329091442", "versionStartIncluding": "20180319150121", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command."}, {"lang": "es", "value": "En Progress Chef Automate, versiones anteriores a la 4.13.295, en la plataforma Linux x86, un atacante autenticado puede obtener acceso a la funcionalidad restringida de Chef Automate en m\u00faltiples servicios a trav\u00e9s de entradas indebidamente neutralizadas utilizadas en un comando SQL."}], "id": "CVE-2025-6724", "lastModified": "2026-10-09T09:10:00.213", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security@progress.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6724", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-09-29T13:01:53.269431Z", "version": "2.0.3"}}]}, "published": "2025-09-29T12:15:48.940", "references": [{"source": "security@progress.com", "tags": ["Patch"], "url": "https://docs.chef.io/release_notes_automate/#4.13.295"}], "sourceIdentifier": "security@progress.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@progress.com", "type": "Secondary"}]}

{}

{"created": "2025-09-30T08:48:28.978271+00:00", "updated": "2025-09-30T08:48:28.978339+00:00", "vendors": ["chef", "chef$PRODUCT$automate", "chef$PRODUCT$chef", "linux", "linux$PRODUCT$linux"]}