Lucene search
GitHub Advisory DatabaseGHSA-F68M-Q26R-64F6HistoryMay 17, 2022 - 5:26 a.m.
Chef Improper Access Control vulnerability
2022-05-1705:26:20
CWE-284
GitHub Advisory Database
github.com
1
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.4%
chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.
Affected configurations
Node
chefchefRange<0.9.0
Related
prion
prion
Design/Logic Flaw
2012-08-08 10:26:00
cvelist
cvelist
CVE-2010-5142
2022-10-03 16:21:03
debiancve
debiancve
CVE-2010-5142
2022-10-03 16:21:03
osv
osv
Chef Improper Access Control vulnerability
2022-05-17 05:26:20
cve
cve
CVE-2010-5142
2022-10-03 16:21:03
ubuntucve
ubuntucve
CVE-2010-5142
2012-08-08 00:00:00
nvd
nvd
CVE-2010-5142
2012-08-08 10:26:17
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.4%
Related for GHSA-F68M-Q26R-64F6