CVEvulnerability
CVE-2003-0732
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
Affected configurations
• cisco resource manager 1.0
• cisco resource manager 1.1
• cisco resource manager essentials 2.0
• cisco resource manager essentials 2.1
• cisco resource manager essentials 2.2
• cisco ciscoworks common management foundation 2.0
• cisco ciscoworks common management foundation 2.1
• cisco ciscoworks cd1 1st
• cisco ciscoworks cd1 2nd
• cisco ciscoworks cd1 3rd
• cisco ciscoworks cd1 4th
• cisco ciscoworks cd1 5th
References
- http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/333028 Exploit, Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/333028 Exploit, Vendor Advisory