10
CVE-2003-0731
- EPSS 0.38%
- Published 20.10.2003 04:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Resource Manager Version1.0
Cisco ≫ Resource Manager Version1.1
Cisco ≫ Resource Manager Essentials Version2.0
Cisco ≫ Resource Manager Essentials Version2.1
Cisco ≫ Resource Manager Essentials Version2.2
Cisco ≫ Ciscoworks Common Management Foundation Version2.0
Cisco ≫ Ciscoworks Common Management Foundation Version2.1
Cisco ≫ Ciscoworks Cd1 Version1st
Cisco ≫ Ciscoworks Cd1 Version2nd
Cisco ≫ Ciscoworks Cd1 Version3rd
Cisco ≫ Ciscoworks Cd1 Version4th
Cisco ≫ Ciscoworks Cd1 Version5th
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.38% | 0.566 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|