Lucene search

[email protected]NVD:CVE-2003-0731

HistoryOct 20, 2003 - 4:00 a.m.

CVE-2003-0731

2003-10-2004:00:00

[email protected]

web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the “cmd” parameter with a modifyUser value and a modified “priviledges” parameter.

Affected configurations

NVD

Node

ciscoresource_managerMatch1.0

ciscoresource_managerMatch1.1

ciscoresource_manager_essentialsMatch2.0

ciscoresource_manager_essentialsMatch2.1

ciscoresource_manager_essentialsMatch2.2

Node

ciscociscoworks_common_management_foundationMatch2.0

ciscociscoworks_common_management_foundationMatch2.1

ciscociscoworks_cd1Match1st

ciscociscoworks_cd1Match2nd

ciscociscoworks_cd1Match3rd

ciscociscoworks_cd1Match4th

ciscociscoworks_cd1Match5th

References

www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml

www.securityfocus.com/archive/1/333028

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

Related for NVD:CVE-2003-0731

cve1 cvelist1