Loading...
Loading...
chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.
August 8, 2012
April 29, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2010-5142
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.