CVE-2013-2143

This Metasploit module exploits a missing authorization vulnerability in Katello and Red Hat Satellite (CVE-2013-2143) by escalating a user's privileges to administrator via the 'update_roles' action. It authenticates, retrieves a CSRF token, and sends a crafted PUT request to modify the user's role.

This Metasploit module exploits a missing authorization vulnerability in Katello and Red Hat Satellite (CVE-2013-2143) by escalating a user's privileges to administrator via the 'update_roles' action. It authenticates, retrieves a CSRF token, and sends a PUT request to modify the user's role.