Vulnerability Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Resource Manager | 1.0 |
| Cisco | Resource Manager Essentials | 2.0 |
| Cisco | Ciscoworks Common Management Foundation | 2.0 |
| Cisco | Ciscoworks Cd1 | 1st |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtmlPatchVendor Advisory
- http://www.securityfocus.com/archive/1/333028ExploitVendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtmlPatchVendor Advisory
- http://www.securityfocus.com/archive/1/333028ExploitVendor Advisory
FAQ
What is CVE-2003-0731?
CVE-2003-0731 is a vulnerability with a CVSS score of 10.0 (HIGH). CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly inv...
How severe is CVE-2003-0731?
CVE-2003-0731 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0731?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Resource Manager, Cisco Resource Manager Essentials, Cisco Ciscoworks Common Management Foundation, Cisco Ciscoworks Cd1.