CVE-2013-2143

CVE-2013-2143 describes a privilege escalation vulnerability in Katello 1.5.0-14 and earlier, as well as Red Hat Satellite. An authenticated attacker can exploit a missing authorization check in the users controller's update_roles action to elevate a standard user account to an administrator account. With a CVSS score of 6.5, this vulnerability is of medium severity, allowing an attacker to gain privileges over the network with low attack complexity. The potential impact includes compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit intelligence indicates the existence of a Metasploit module (EDB-32515) for this vulnerability. Despite the availability of exploit code, there is no evidence of active exploitation, and community discussion and media coverage remain minimal.