Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-5142HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-5142
2022-10-0316:21:03
Debian Security Bug Tracker
security-tracker.debian.org
8
chef
api
vulnerability
unprivileged
user account
management
unix
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.4%
chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | chef | < 0.10.10-1 | chef_0.10.10-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2012-08-08 10:26:00
cvelist
cvelist
CVE-2010-5142
2022-10-03 16:21:03
osv
osv
Chef Improper Access Control vulnerability
2022-05-17 05:26:20
cve
cve
CVE-2010-5142
2022-10-03 16:21:03
ubuntucve
ubuntucve
CVE-2010-5142
2012-08-08 00:00:00
nvd
nvd
CVE-2010-5142
2012-08-08 10:26:17
github
github
Chef Improper Access Control vulnerability
2022-05-17 05:26:20
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.4%
Related for DEBIANCVE:CVE-2010-5142