Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
References (2)
Core 2
Core References
Exploit, Vendor Advisory mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/333028
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
Scores
EPSS
0.0209
EPSS Percentile
79.7%
Details
Status
published
Products (12)
cisco/ciscoworks_cd1
1st
cisco/ciscoworks_cd1
2nd
cisco/ciscoworks_cd1
3rd
cisco/ciscoworks_cd1
4th
cisco/ciscoworks_cd1
5th
cisco/ciscoworks_common_management_foundation
2.0
cisco/ciscoworks_common_management_foundation
2.1
cisco/resource_manager
1.0
cisco/resource_manager
1.1
cisco/resource_manager_essentials
2.0
... and 2 more
Published
Oct 20, 2003
Tracked Since
Feb 18, 2026