CVE-2015-8559

CVE-2015-8559 describes a vulnerability in Chef Infra Client versions prior to 15.4.45 where the knife bootstrap command inadvertently logs the validator.pem private RSA key to /var/log/messages. This vulnerability carries a high CVSS score of 7.5, indicating a critical information disclosure risk (CWE-200) due to its network-based attack vector and low complexity, allowing an attacker to gain unauthorized access to sensitive cryptographic material. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not widely targeted.