PT-2003-1827 · Cisco · Ciscoworks Common Management Foundation

Published 2003-09-04 · Updated 2008-09-05 · CVE-2003-0732

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CiscoWorks Common Management Foundation (CMF) versions 2.1 and earlier

Description: The issue allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the guest user to the Admin user on the Modify or delete users pages.

Recommendations: For CiscoWorks Common Management Foundation (CMF) versions 2.1 and earlier, update to a version later than 2.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0732

Affected Products

Ciscoworks Common Management Foundation

References · 3

• 🔥 http://securityfocus.com/archive/1/333028 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0732 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml · Vendor Advisory