CVE-2003-0731: Cisco Ciscoworks CD1

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.

Affected products

• Cisco Ciscoworks CD1: version 1st only; version 2nd only; version 3rd only; version 4th only; version 5th only
• Cisco Ciscoworks Common Management Foundation: version 2.0 only; version 2.1 only
• Cisco Resource Manager: version 1.0 only; version 1.1 only
• Cisco Resource Manager Essentials: version 2.0 only; version 2.1 only; version 2.2 only

Published 2003-10-20. Last modified 2026-06-16.