Threats tagged 'ghsa-xj8g-6jm5-p9wv'

A vulnerability in Cisco Prime Infrastructure's log file download functionality allows an authenticated remote attacker to download arbitrary log files due to insufficient authorization checks. Exploitation requires valid credentials to the web management interface. The attacker can craft a URL request to access sensitive log files they should not be authorized to view.