A vulnerability in Cisco ISE's web-based management interface allows an authenticated attacker with administrative privileges to access sensitive information from network users outside their assigned security group. This occurs due to improper authorization enforcement on certain files, enabling the attacker to export user data including normally hidden passwords.