| Package | Affected versions | Patched versions |
|---|---|---|
| ciscoworks common management foundation | = 2.0= 2.1 | |
| resource manager | = 1.0= 1.1 | |
| resource manager essentials | = 2.0= 2.1= 2.2 |
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free