CVEvulnerability

CVE-2003-0731

10.0 HIGH Published 2003-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.

Affected configurations

• cisco resource manager 1.0 • cisco resource manager 1.1 • cisco resource manager essentials 2.0 • cisco resource manager essentials 2.1 • cisco resource manager essentials 2.2 • cisco ciscoworks common management foundation 2.0 • cisco ciscoworks common management foundation 2.1 • cisco ciscoworks cd1 1st • cisco ciscoworks cd1 2nd • cisco ciscoworks cd1 3rd • cisco ciscoworks cd1 4th • cisco ciscoworks cd1 5th

References