CVE-2013-2143

Red Hat Satellite and Katello < 1.5.0-14 - Authenticated Privilege Escalation via users/update_roles

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2013-2143. PoCs published by Metasploit, including Metasploit module auxiliary/admin/http/katello_satellite_priv_esc.

AI-analyzed exploit summary This Metasploit module exploits a missing authorization vulnerability in Katello and Red Hat Satellite (CVE-2013-2143) by escalating a user's privileges to administrator via the 'update_roles' action. It authenticates, retrieves a CSRF token, and sends a crafted PUT request to modify the user's role.

Description

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/32515

This Metasploit module exploits a missing authorization vulnerability in Katello and Red Hat Satellite (CVE-2013-2143) by escalating a user's privileges to administrator via the 'update_roles' action. It authenticates, retrieves a CSRF token, and sends a crafted PUT request to modify the user's role.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Katello (Red Hat Satellite) 1.5.0-14 and earlier
Auth required
Prerequisites: Valid user credentials · Network access to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/katello_satellite_priv_esc.rb

This Metasploit module exploits a missing authorization vulnerability in Katello and Red Hat Satellite (CVE-2013-2143) by escalating a user's privileges to administrator via the 'update_roles' action. It authenticates, retrieves a CSRF token, and sends a PUT request to modify the user's role.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Katello and Red Hat Satellite (versions 1.5.0-14 and earlier)
Auth required
Prerequisites: Valid user credentials · Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/32515
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/66434
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/104981

Scores

EPSS 0.6147
EPSS Percentile 98.4%

Details

CWE
CWE-20
Status published
Products (2)
redhat/network_satellite
theforeman/katello < 1.5.0-14
Published Apr 17, 2014
Tracked Since Feb 18, 2026