https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 17:51:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2010-5142 <p>chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.</p> <p>chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.</p> https://db.gcve.eu/vuln/fkie_cve-2010-5142 https://db.gcve.eu/vuln/ghsa-f68m-q26r-64f6 <p><strong>Affected:</strong> RubyGems: chef</p> <p>`chef-server-api/app/controllers/users.rb` in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.</p> <p><strong>Affected:</strong> RubyGems: chef</p> <p>`chef-server-api/app/controllers/users.rb` in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI.</p> https://db.gcve.eu/vuln/ghsa-f68m-q26r-64f6 https://db.gcve.eu/vuln/gsd-2010-5142 gsd-2010-5142 https://db.gcve.eu/vuln/gsd-2010-5142