CVE-2013-2113
published 2013-07-31CVE-2013-2113: The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other…
PriorityP346medium6CVSS 2.0
AVNACMAuSCPIPAP
EXPLOIT
EPSS
20.93%
97.3th percentile
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openstack | — | — |
| theforeman | foreman | <= 1.2.0 | — |
| theforeman | foreman | — | — |
CVSS provenance
nvdv2.06.0MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
vendor_redhat6.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment
vendor_redhat·2013-06-07·CVSS 6.0
CVE-2013-2113 [MEDIUM] CWE-285 Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment
Foreman: app/controllers/users_controller.rb arbitrary admin user creation due to mass assignment
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.
Package: foreman (Red Hat Satellite 6) - Not affected
GHSA
GHSA-5f23-fjp4-22q7: The create method in app/controllers/users_controller
ghsa_unreviewed·2022-05-14
CVE-2013-2113 [MEDIUM] GHSA-5f23-fjp4-22q7: The create method in app/controllers/users_controller
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.
No detection rules found.
Exploit-DB
Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)
exploitdb·2013-08-22
CVE-2013-2113 Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)
Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)
---
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit4 'Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment',
'Description' => %q{
This module exploits a mass assignment vulnerability in the 'create'
action of 'users' controller of Foreman and Red Hat OpenStack/Satellite
(Foreman 1.2.0-RC1 and earlier) by creating an arbitrary administrator
account. For this exploit to work, your account must have 'create_users'
permission (e.g., Manager role).
},
'Author' => 'Ramon de C Va
Metasploit
Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment
metasploit
Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment
Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment
This module exploits a mass assignment vulnerability in the 'create' action of 'users' controller of Foreman and Red Hat OpenStack/Satellite (Foreman 1.2.0-RC1 and earlier) by creating an arbitrary administrator account. For this exploit to work, your account must have 'create_users' permission (e.g., Manager role).
http://projects.theforeman.org/issues/2630http://rhn.redhat.com/errata/RHSA-2013-0995.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=968166https://groups.google.com/forum/#%21topic/foreman-users/6WpO_3ugiXUhttp://projects.theforeman.org/issues/2630http://rhn.redhat.com/errata/RHSA-2013-0995.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=968166https://groups.google.com/forum/#%21topic/foreman-users/6WpO_3ugiXU
2013-07-31
Published