VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2003· Updated Jun 16, 2026

CVE-2003-0731

CVE-2003-0731

Description

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Cisco Systems, Inc./Ciscoworks Common Management Foundation3 versions
    cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*
    • (no CPE)range: <=2.1
  • Cisco Systems, Inc./Resource Manager5 versions
    cpe:2.3:a:cisco:resource_manager:1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:resource_manager:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:resource_manager:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:resource_manager_essentials:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:resource_manager_essentials:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:resource_manager_essentials:2.2:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Ciscoworks Cd15 versions
    cpe:2.3:o:cisco:ciscoworks_cd1:1st:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:cisco:ciscoworks_cd1:1st:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ciscoworks_cd1:2nd:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ciscoworks_cd1:3rd:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ciscoworks_cd1:4th:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ciscoworks_cd1:5th:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.