{"action":"Upgrade chef to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"chef","cve_ids":["CVE-2010-5142"],"ecosystem":"RubyGems","epss":0.0157,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-f68m-q26r-64f6","id":"tcs_01M5KEJYN7AK4RRKMSVAD3J2EA","modified_at":"2024-12-06T05:25:24.468184Z","published_at":"2022-05-17T05:26:20Z","references":["https://osv.dev/vulnerability/GHSA-f68m-q26r-64f6","https://nvd.nist.gov/vuln/detail/CVE-2010-5142","https://github.com/opscode/chef/commit/c3bb41f727fbe00e5de719d687757b24c8dcdfc8","https://github.com/chef/chef","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/chef/CVE-2010-5142.yml","http://tickets.opscode.com/browse/CHEF-1289"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f68m-q26r-64f6","url":"https://osv.dev/vulnerability/GHSA-f68m-q26r-64f6"}],"summary":"Chef Improper Access Control vulnerability"}