CVE-2003-0732 CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Adm...
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco resource manager | = 1.0 | No fix listed |
| cisco resource manager | = 1.1 | No fix listed |
| cisco resource manager essentials | = 2.0 | No fix listed |
| cisco resource manager essentials | = 2.1 | No fix listed |
| cisco resource manager essentials | = 2.2 | No fix listed |
| ciscoworks common management foundation | = 2.0 | No fix listed |
| ciscoworks common management foundation | = 2.1 | No fix listed |
| ciscoworks cd1 | = 1st | No fix listed |
| ciscoworks cd1 | = 2nd | No fix listed |
| ciscoworks cd1 | = 3rd | No fix listed |
| ciscoworks cd1 | = 4th | No fix listed |
| ciscoworks cd1 | = 5th | No fix listed |
References
- 20030813 CiscoWorks Application Vulnerabilities patch vendor-advisory
- 20030813 Portcullis Security Advisory: CiscoWorks 2000 Privilege Escalation Vulnerabilities exploit mailing-list vendor-advisory