CVE-2013-2113

Related Files

Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment

Posted Aug 21, 2013

Authored by Ramon de C Valle | Site metasploit.com

This Metasploit module exploits a mass assignment vulnerability in the create action of users controller of Foreman and Red Hat OpenStack/Satellite (Foreman 1.2.0-RC1 and earlier) by creating an arbitrary administrator account. For this exploit to work, your account must have create_users permission (e.g., Manager role).

tags | exploit, arbitrary

systems | linux, redhat

advisories | CVE-2013-2113, OSVDB-94655

SHA-256 | 8aba4389b4b51efa17c66a8c2ddaabb0489ae3e020c3f31852637c4d80e383a3

Download | Favorite | View

Red Hat Security Advisory 2013-0995-01

Posted Jun 27, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0995-01 - A flaw was found in the create method of the Foreman Bookmarks controller. A user with privileges to create a bookmark could use this flaw to execute arbitrary code with the privileges of the user running Foreman, giving them control of the system running Foreman and all systems managed by Foreman.

tags | advisory, arbitrary

systems | linux, redhat

advisories | CVE-2013-2113, CVE-2013-2121

SHA-256 | a6ea90b4ec301210ea27cf545a21cf478f09de9e3ff6fc69ffd8f53ff3497b99

Download | Favorite | View