critical10.0
CVE-2003-0731
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.n…
Impact
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Resource Manager | Versions 1.0, 1.1 |
| Cisco | Resource Manager Essentials | Versions 2.0, 2.1, 2.2 |
| Cisco | Ciscoworks Common Management Foundation | Versions 2.0, 2.1 |
| Cisco | Ciscoworks Cd1 | Versions 1st, 2nd, 3rd, 4th, 5th |