Lucene search

[email protected]CVE-2003-0731

HistoryOct 20, 2003 - 4:00 a.m.

CVE-2003-0731

2003-10-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ciscoworks

cmf

security

cve-2003-0731

nvd

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

59.4%

JSON

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the “cmd” parameter with a modifyUser value and a modified “priviledges” parameter.

CPENameOperatorVersion
cisco:resource_manager_essentialscisco resource manager essentialseq2.1
cisco:resource_managercisco resource managereq1.0
cisco:resource_manager_essentialscisco resource manager essentialseq2.2
cisco:resource_manager_essentialscisco resource manager essentialseq2.0
cisco:resource_managercisco resource managereq1.1
cisco:ciscoworks_cd1cisco ciscoworks cd1eq4th
cisco:ciscoworks_common_management_foundationcisco ciscoworks common management foundationeq2.1
cisco:ciscoworks_cd1cisco ciscoworks cd1eq1st
cisco:ciscoworks_cd1cisco ciscoworks cd1eq3rd
cisco:ciscoworks_cd1cisco ciscoworks cd1eq2nd

CPE	Name	Operator	Version
cisco:resource_manager_essentials	cisco resource manager essentials	eq	2.1
cisco:resource_manager	cisco resource manager	eq	1.0
cisco:resource_manager_essentials	cisco resource manager essentials	eq	2.2
cisco:resource_manager_essentials	cisco resource manager essentials	eq	2.0
cisco:resource_manager	cisco resource manager	eq	1.1
cisco:ciscoworks_cd1	cisco ciscoworks cd1	eq	4th
cisco:ciscoworks_common_management_foundation	cisco ciscoworks common management foundation	eq	2.1
cisco:ciscoworks_cd1	cisco ciscoworks cd1	eq	1st
cisco:ciscoworks_cd1	cisco ciscoworks cd1	eq	3rd
cisco:ciscoworks_cd1	cisco ciscoworks cd1	eq	2nd

Rows per page:

1-10 of 121

References

www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml

www.securityfocus.com/archive/1/333028

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

59.4%

JSON

Related for CVE-2003-0731

cvelist1