Privilege Escalation in CiscoWorks Common Management Foundation by Guest User Manipulation

CVE-2003-0732

Summary

The CiscoWorks Common Management Foundation (CMF) versions 2.1 and earlier are susceptible to a vulnerability that allows a guest user to exploit user management functions. By manipulating the 'guest' account to gain admin privileges through the Modify or Delete Users pages, unauthorized users may access restricted information and potentially take control of the system. This critical flaw emphasizes the need for robust user access controls and prompt updates to secure sensitive management interfaces.

References