This vulnerability in Cisco Catalyst SD-WAN Manager's web UI allows an authenticated user with read-only access to escalate privileges to a high-privileged user by exploiting the logging of sensitive session information in audit logs. The issue arises from excessive data being recorded, which can be leveraged to elevate permissions and perform high-privilege actions. The CVSS 3.1 base score is 5.4 (medium severity), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and limited confidentiality and integrity impact. The vulnerability is present in many versions of the product, but no patch or official fix has been documented in the provided data.

An attacker with authenticated read-only access to Cisco Catalyst SD-WAN Manager could exploit this vulnerability to gain high-privileged user capabilities, potentially allowing unauthorized actions within the system. The confidentiality and integrity of the system could be compromised, but availability is not affected. There are no known exploits in the wild, and the impact is limited to environments where an attacker already has read-only access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should carefully control and monitor access to Cisco Catalyst SD-WAN Manager, limiting read-only user permissions and audit log access to trusted personnel only. No vendor advisory or patch links are currently available to indicate an official fix or temporary mitigation.