Back to feed
EUVD-2003-0722 · Published Oct 20, 2003
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
Technologies
Cisco Ciscoworks Common Management FoundationCisco Resource Manager EssentialsCisco Resource ManagerCisco Ciscoworks Cd1
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
