CVE-2003-0732: Cisco Ciscoworks CD1

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.

Affected products

• Cisco Ciscoworks CD1: version 1st only; version 2nd only; version 3rd only; version 4th only; version 5th only
• Cisco Ciscoworks Common Management Foundation: version 2.0 only; version 2.1 only
• Cisco Resource Manager: version 1.0 only; version 1.1 only
• Cisco Resource Manager Essentials: version 2.0 only; version 2.1 only; version 2.2 only

Published 2003-10-20. Last modified 2026-06-16.