Description
A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected products
- Cisco / Cisco Prime Infrastructure3.6.0 – 3.6.0
- Cisco / Cisco Prime Infrastructure3.7.0 – 3.7.0
- Cisco / Cisco Prime Infrastructure3.4.0 – 3.4.0
- Cisco / Cisco Prime Infrastructure3.3.0 – 3.3.0
- Cisco / Cisco Prime Infrastructure3.5.0 – 3.5.0
- Cisco / Cisco Prime Infrastructure3.2.0-FIPS – 3.2.0-FIPS
- Cisco / Cisco Prime Infrastructure3.8.0-FED – 3.8.0-FED
- Cisco / Cisco Prime Infrastructure3.9.0 – 3.9.0
- Cisco / Cisco Prime Infrastructure3.8.0 – 3.8.0
- Cisco / Cisco Prime Infrastructure3.10.0 – 3.10.0
- Cisco / Cisco Prime Infrastructure3.9.1 – 3.9.1
- Cisco / Cisco Prime Infrastructure3.8.1 – 3.8.1
- Cisco / Cisco Prime Infrastructure3.7.1 – 3.7.1
- Cisco / Cisco Prime Infrastructure3.5.1 – 3.5.1
- Cisco / Cisco Prime Infrastructure3.4.2 – 3.4.2
- Cisco / Cisco Prime Infrastructure3.3.1 – 3.3.1
- Cisco / Cisco Prime Infrastructure3.2.1 – 3.2.1
- Cisco / Cisco Prime Infrastructure3.2.2 – 3.2.2
- Cisco / Cisco Prime Infrastructure3.4.1 – 3.4.1
- Cisco / Cisco Prime Infrastructure3.10.2 – 3.10.2
- Cisco / Cisco Prime Infrastructure3.10.3 – 3.10.3
- Cisco / Cisco Prime Infrastructure3.10 – 3.10
- Cisco / Cisco Prime Infrastructure3.10.1 – 3.10.1
- Cisco / Cisco Prime Infrastructure3.7.1 Update 03 – 3.7.1 Update 03
- Cisco / Cisco Prime Infrastructure3.7.1 Update 04 – 3.7.1 Update 04
- Cisco / Cisco Prime Infrastructure3.7.1 Update 06 – 3.7.1 Update 06
- Cisco / Cisco Prime Infrastructure3.7.1 Update 07 – 3.7.1 Update 07
- Cisco / Cisco Prime Infrastructure3.8.1 Update 01 – 3.8.1 Update 01
- Cisco / Cisco Prime Infrastructure3.8.1 Update 02 – 3.8.1 Update 02
- Cisco / Cisco Prime Infrastructure3.8.1 Update 03 – 3.8.1 Update 03
- Cisco / Cisco Prime Infrastructure3.8.1 Update 04 – 3.8.1 Update 04
- Cisco / Cisco Prime Infrastructure3.9.1 Update 01 – 3.9.1 Update 01
- Cisco / Cisco Prime Infrastructure3.9.1 Update 02 – 3.9.1 Update 02
- Cisco / Cisco Prime Infrastructure3.9.1 Update 03 – 3.9.1 Update 03
- Cisco / Cisco Prime Infrastructure3.9.1 Update 04 – 3.9.1 Update 04
- Cisco / Cisco Prime Infrastructure3.10 Update 01 – 3.10 Update 01
- Cisco / Cisco Prime Infrastructure3.4.2 Update 01 – 3.4.2 Update 01
- Cisco / Cisco Prime Infrastructure3.6.0 Update 04 – 3.6.0 Update 04
- Cisco / Cisco Prime Infrastructure3.6.0 Update 02 – 3.6.0 Update 02
- Cisco / Cisco Prime Infrastructure3.6.0 Update 03 – 3.6.0 Update 03
- Cisco / Cisco Prime Infrastructure3.6.0 Update 01 – 3.6.0 Update 01
- Cisco / Cisco Prime Infrastructure3.5.1 Update 03 – 3.5.1 Update 03
- Cisco / Cisco Prime Infrastructure3.5.1 Update 01 – 3.5.1 Update 01
- Cisco / Cisco Prime Infrastructure3.5.1 Update 02 – 3.5.1 Update 02
- Cisco / Cisco Prime Infrastructure3.7.0 Update 03 – 3.7.0 Update 03
- Cisco / Cisco Prime Infrastructure3.8.0 Update 01 – 3.8.0 Update 01
- Cisco / Cisco Prime Infrastructure3.8.0 Update 02 – 3.8.0 Update 02
- Cisco / Cisco Prime Infrastructure3.7.1 Update 01 – 3.7.1 Update 01
- Cisco / Cisco Prime Infrastructure3.7.1 Update 02 – 3.7.1 Update 02
- Cisco / Cisco Prime Infrastructure3.7.1 Update 05 – 3.7.1 Update 05
- Cisco / Cisco Prime Infrastructure3.9.0 Update 01 – 3.9.0 Update 01
- Cisco / Cisco Prime Infrastructure3.3.0 Update 01 – 3.3.0 Update 01
- Cisco / Cisco Prime Infrastructure3.4.1 Update 02 – 3.4.1 Update 02
- Cisco / Cisco Prime Infrastructure3.4.1 Update 01 – 3.4.1 Update 01
- Cisco / Cisco Prime Infrastructure3.5.0 Update 03 – 3.5.0 Update 03
- Cisco / Cisco Prime Infrastructure3.5.0 Update 01 – 3.5.0 Update 01
- Cisco / Cisco Prime Infrastructure3.5.0 Update 02 – 3.5.0 Update 02
- Cisco / Cisco Prime Infrastructure3.10.4 – 3.10.4
- Cisco / Cisco Prime Infrastructure3.10.4 Update 01 – 3.10.4 Update 01
- Cisco / Cisco Prime Infrastructure3.10.4 Update 02 – 3.10.4 Update 02
- Cisco / Cisco Prime Infrastructure3.10.4 Update 03 – 3.10.4 Update 03
- Cisco / Cisco Prime Infrastructure3.10.5 – 3.10.5
- Cisco / Cisco Prime Infrastructure3.10.6 – 3.10.6
- Cisco / Cisco Prime Infrastructure3.10.6 Update 01 – 3.10.6 Update 01
- Cisco / Cisco Prime Infrastructure3.10.6 Update 02 – 3.10.6 Update 02
- Cisco / prime_infrastructure3.10.6
- Cisco / prime_infrastructure3.10.6 – 3.10.6
- Cisco / prime_infrastructure3.10.6 – 3.10.6
- Cisco / prime_infrastructure3.10.6 – 3.10.6
Updated 28m ago · 8 sources