Lucene search
RedhatCVELIST:CVE-2013-2143HistoryApr 17, 2014 - 2:00 p.m.
CVE-2013-2143
2014-04-1714:00:00
redhat
www.cve.org
The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.
Related
checkpoint_advisories
checkpoint_advisories
Katello update_roles Privilege Escalation (CVE-2013-2143)
2014-05-29 00:00:00
veracode
veracode
Privilege Escalation
2017-03-28 07:16:46
packetstorm
packetstorm
Katello (Red Hat Satellite) users/update_roles Missing Authorization
2014-03-25 00:00:00
prion
prion
Authorization
2014-04-17 14:55:00
nvd
nvd
CVE-2013-2143
2014-04-17 14:55:05
cve
cve
CVE-2013-2143
2014-04-17 14:55:05
zdt
zdt
Katello (Red Hat Satellite) users/update_roles Missing Authorization
2014-03-26 00:00:00