CVE-2010-5142

CVE-2010-5142 describes a privilege escalation vulnerability in Chef before version 0.9.0, specifically within the chef-server-api/app/controllers/users.rb component. Authenticated users could manage user accounts (create, destroy, update) via the /users URI without requiring administrative privileges. This vulnerability carries a CVSS score of 6.5, indicating a medium severity with a low attack complexity and potential for partial confidentiality, integrity, and availability impact. While the vulnerability allows remote authenticated users to manipulate user accounts, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old flaw.