Unscored CVE-2003-0731 EUVD-2003-0722GHSA-vccp-g983-v87h

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST re…

Published Sep 4, 2003 · Updated Sep 16, 2024 · Assigned by mitre

Description

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.

References

20030813 Portcullis Security Advisory: CiscoWorks 2000 Privilege Escalation Vulnerabilities mailing-list
20030813 CiscoWorks Application Vulnerabilities vendor-advisory