CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 1CVE-2003-0731
https://notcve.org/view.php?id=CVE-2003-0731
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter. • http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml http://www.securityfocus.com/archive/1/333028 •
CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 1CVE-2003-0732
https://notcve.org/view.php?id=CVE-2003-0732
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages. • http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml http://www.securityfocus.com/archive/1/333028 •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1126
https://notcve.org/view.php?id=CVE-1999-1126
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_". • http://ciac.llnl.gov/ciac/bulletins/i-086.shtml http://www.cisco.com/warp/public/770/crmtmp-pub.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/1575 •
CVSS: 1.2EPSS: 0%CPEs: 2EXPL: 0CVE-1999-1042
https://notcve.org/view.php?id=CVE-1999-1042
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings. • http://www.cisco.com/warp/public/770/crmtmp-pub.shtml •