This vulnerability in Cisco Catalyst SD-WAN Manager's web UI allows an authenticated attacker with read-only access to escalate privileges due to improper redaction of sensitive data in device configurations and templates. Exploiting this flaw could enable unauthorized modification of configuration settings by elevating the attacker's permissions to a high-privileged user level. The CVSS 3.1 base score is 5.4 (medium severity), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impact on confidentiality and integrity but not availability. Affected versions span many releases of the product. No patch or official remediation level is indicated in the provided data.

Successful exploitation could allow an attacker with initially read-only access to gain high-privileged user permissions and modify configuration settings within Cisco Catalyst SD-WAN Manager. This impacts the confidentiality and integrity of the system's configuration data but does not affect availability. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict read-only user access to trusted personnel and monitor for unusual privilege escalations. Follow Cisco's security advisories for updates on patches or workarounds.