CVE:CVE-2003-0731
CNNVD:CNNVD-200310-029
CiscoWorks Common Management Foundation (CMF) 2.1及其早期版本存在漏洞。客户借助com.cisco.nm.cmf.servlet.CsAuthServlet的某些POST请求获得管理员特权，可能涉及到modifyUser值的“cmd”参数和修改的“priviledges”参数。
solution:Upgrade cisco resource_manager to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade cisco resource_manager_essentials to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2; Upgrade cisco ciscoworks_common_management_foundation to a higher version than 2.0,2.1,and avoid the version 2.0,2.1; Upgrade cisco ciscoworks_cd1 to a higher version than 1st,2nd,3rd,4th,5th,and avoid the version 1st,2nd,3rd,4th,5th