Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
References (2)
Core 2
Core References
Exploit, Vendor Advisory mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/333028
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
Scores
EPSS
0.0209
EPSS Percentile
79.7%
Details
Status
published
Products (12)
cisco/ciscoworks_cd1
1st
cisco/ciscoworks_cd1
2nd
cisco/ciscoworks_cd1
3rd
cisco/ciscoworks_cd1
4th
cisco/ciscoworks_cd1
5th
cisco/ciscoworks_common_management_foundation
2.0
cisco/ciscoworks_common_management_foundation
2.1
cisco/resource_manager
1.0
cisco/resource_manager
1.1
cisco/resource_manager_essentials
2.0
... and 2 more
Published
Oct 20, 2003
Tracked Since
Feb 18, 2026