« Volver al listado

CVE-2003-0732

Estado: ModificadaAlta (10)—

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cisco — Ciscoworks CD1Cisco — Ciscoworks Common Management FoundationCisco — Resource ManagerCisco — Resource Manager Essentials

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0732",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-10-20T04:00:00.000",
  "references": [
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/333028",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/333028",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the \"guest\" user to the Admin user on the Modify or delete users pages."
    }
  ],
  "lastModified": "2026-06-16T22:02:43.773",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:resource_manager:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CD172F3-4964-410A-A7E9-5659DE662734"
            },
            {
              "criteria": "cpe:2.3:a:cisco:resource_manager:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8305C239-6496-4CF9-9515-FDE7478877E7"
            },
            {
              "criteria": "cpe:2.3:a:cisco:resource_manager_essentials:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2C398A1-1539-4D21-A486-DDE591546949"
            },
            {
              "criteria": "cpe:2.3:a:cisco:resource_manager_essentials:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D70C0ACD-9782-468D-B283-6AA5DBEBAA8C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:resource_manager_essentials:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "006C6865-45CE-4150-9FD6-C31138DBF1DC"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "716ABF75-32B2-4E9A-A612-BA06C5C2E17D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3954D0D1-9FDF-47D0-9710-D0FB06955B8B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ciscoworks_cd1:1st:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "419D225D-28FD-4D76-ACBF-45EA35B9973E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ciscoworks_cd1:2nd:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF809BC6-93A5-4B1D-BC3C-2A41F32D4A92"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ciscoworks_cd1:3rd:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EED9047B-5AA5-49C1-B8D1-690D505082D7"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ciscoworks_cd1:4th:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45096D29-930F-4FE0-A23F-8C57BF62567A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ciscoworks_cd1:5th:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC6393A1-F3A2-4D73-A845-03C9725B91A9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}