EDB-27776

functional

Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)

view exploit source exploit_dbverifiedtype webappsauthor Metasploitpublished 2013-08-22catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2013-2113USmedium6.0Exploit
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privil…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan