CVE:CVE-2003-0732
CNNVD:CNNVD-200310-064
CiscoWorks Common Management Foundation(CMF)2.1及其早期版本存在漏洞。客户可以通过在修改或删除的用户网页上将"guest"用户改变为管理员用户获取限制信息和可能提升管理员权限。
solution:Upgrade cisco resource_manager to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade cisco resource_manager_essentials to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2; Upgrade cisco ciscoworks_common_management_foundation to a higher version than 2.0,2.1,and avoid the version 2.0,2.1; Upgrade cisco ciscoworks_cd1 to a higher version than 1st,2nd,3rd,4th,5th,and avoid the version 1st,2nd,3rd,4th,5th