Unscored CVE-2003-0732 EUVD-2003-0723GHSA-2rg6-3m8g-8x9g

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain admi…

Published Sep 4, 2003 · Updated Sep 17, 2024 · Assigned by mitre

Description

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.

References

20030813 Portcullis Security Advisory: CiscoWorks 2000 Privilege Escalation Vulnerabilities mailing-list
20030813 CiscoWorks Application Vulnerabilities vendor-advisory