Executive brief
Cisco Prime Infrastructure, a network management platform, contains a security flaw in its log file download feature. An authorized user with basic access could exploit this to download sensitive system log files they are not supposed to see. This could lead to the exposure of internal system details or configuration information, though it requires the attacker to already have valid login credentials.
Technical details
A vulnerability in Cisco Prime Infrastructure (CWE-862) is caused by insufficient authorization checks on the download service API. An authenticated, remote attacker can exploit this by submitting a specially crafted URL request to the web-based management interface. Successful exploitation allows the attacker to bypass intended access controls and download arbitrary log files containing sensitive information. The attacker must possess valid credentials for the device to perform this action. Cisco has addressed this in version 3.10.6 and subsequent security updates.
Affected products
- Cisco Prime Infrastructure All versions prior to 3.10.6
Timeline
- 2026-05-06: disclosed
- 2026-05-06: advisory
- 2026-06-29: patched: NIST analysis confirms patch in 3.10.6