CVE-2013-2143: The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization f...

Security readout for executives and security teams

An authenticated user could promote an account to administrator in affected Katello and Red Hat Satellite deployments. This is a business risk because those platforms manage infrastructure content and access. The source bundle does not provide CVSS, fixed versions, or a vendor mitigation. Exposure is likely limited to organizations running Katello 1.5.0-14 or earlier, or Red Hat Satellite versions containing the affected users controller. The bundle does not identify CPEs or exact Satellite release ranges. Prioritize if the affected platforms manage production infrastructure or if many non-admin users can authenticate. Treat as high until inventory proves the products are absent or vendor-fixed. Mitigation focus: Check Red Hat and Katello advisories for fixed versions or vendor guidance.; Restrict Katello and Satellite administrative interfaces to trusted networks.; Remove unnecessary authenticated users and service accounts..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.