CVE-2003-0732

Critical

Description

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.

SeverityCritical
CVSS10.0
Exploit probability—
ProductCiscoworks Common Management Foundation
PublishedOct 20, 2003
First seenOct 20, 2003

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco ciscoworks_common_management_foundation2.0, 2.1—
cisco resource_manager1.0, 1.1—
cisco resource_manager_essentials2.0, 2.1, 2.2—
cisco ciscoworks_cd11st, 2nd, 3rd, 4th, 5th—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2003-0732 · Ciscoworks Common Management Foundation · Dark Radar