Launchpad.net

CVE 2015-8559

The knife bootstrap command in chef leaks the validator.pem private RSA key to /var/log/messages.

See the CVE page on Mitre.org for more details.