Privilege Escalation Vulnerability in CiscoWorks Common Management Foundation

CVE-2003-0731

Summary

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier versions are susceptible to a privilege escalation vulnerability that permits a guest user to unlawfully obtain administrative rights. This exploit is realized through a specific POST request directed to the CsAuthServlet, where the 'cmd' parameter is utilized to execute 'modifyUser' operations, accompanied by tampered 'privileges' parameters. This vulnerability could allow unauthorized actions to be taken by users without suitable permissions, potentially compromising the security of systems utilizing this product.

References