rapid7/metasploit-framework — pull request #2143 by rcvalle (2013-07-22 18:30:41+00:00)
Title: Add foreman_openstack_satellite_priv_esc.rb auxiliary module

This module exploits a mass assignment vulnerability in the 'create' action of 'users' controller of Foreman and Red Hat OpenStack/Satellite (Foreman 1.2.0-RC1 and earlier) by creating an arbitrary administrator account.