CVE-2026-20189 - Cisco Prime Infrastructure Information Disclosure Vulnerability

Back Back to CVE browser

MEDIUM

Cisco Prime Infrastructure Information Disclosure Vulnerability

Published May 6, 2026

4.3

MEDIUM

CVSS 3.1

EPSS 0.21%

Description

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device.

Affected products

Vendor Cisco Product Cisco Prime Infrastructure Default
n/a
- Version
  3.10
  Status
  affected
  Constraints
  -
- Version
  3.10 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.10.0
  Status
  affected
  Constraints
  -
- Version
  3.10.1
  Status
  affected
  Constraints
  -
- Version
  3.10.2
  Status
  affected
  Constraints
  -
- Version
  3.10.3
  Status
  affected
  Constraints
  -
- Version
  3.10.4
  Status
  affected
  Constraints
  -
- Version
  3.10.4 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.10.4 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.10.4 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.10.5
  Status
  affected
  Constraints
  -
- Version
  3.10.6
  Status
  affected
  Constraints
  -
- Version
  3.10.6 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.10.6 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.2.0-FIPS
  Status
  affected
  Constraints
  -
- Version
  3.2.1
  Status
  affected
  Constraints
  -
- Version
  3.2.2
  Status
  affected
  Constraints
  -
- Version
  3.3.0
  Status
  affected
  Constraints
  -
- Version
  3.3.0 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.3.1
  Status
  affected
  Constraints
  -
- Version
  3.4.0
  Status
  affected
  Constraints
  -
- Version
  3.4.1
  Status
  affected
  Constraints
  -
- Version
  3.4.1 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.4.1 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.4.2
  Status
  affected
  Constraints
  -
- Version
  3.4.2 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.5.0
  Status
  affected
  Constraints
  -
- Version
  3.5.0 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.5.0 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.5.0 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.5.1
  Status
  affected
  Constraints
  -
- Version
  3.5.1 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.5.1 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.5.1 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.6.0
  Status
  affected
  Constraints
  -
- Version
  3.6.0 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.6.0 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.6.0 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.6.0 Update 04
  Status
  affected
  Constraints
  -
- Version
  3.7.0
  Status
  affected
  Constraints
  -
- Version
  3.7.0 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.7.1
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 04
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 05
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 06
  Status
  affected
  Constraints
  -
- Version
  3.7.1 Update 07
  Status
  affected
  Constraints
  -
- Version
  3.8.0
  Status
  affected
  Constraints
  -
- Version
  3.8.0 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.8.0 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.8.0-FED
  Status
  affected
  Constraints
  -
- Version
  3.8.1
  Status
  affected
  Constraints
  -
- Version
  3.8.1 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.8.1 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.8.1 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.8.1 Update 04
  Status
  affected
  Constraints
  -
- Version
  3.9.0
  Status
  affected
  Constraints
  -
- Version
  3.9.0 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.9.1
  Status
  affected
  Constraints
  -
- Version
  3.9.1 Update 01
  Status
  affected
  Constraints
  -
- Version
  3.9.1 Update 02
  Status
  affected
  Constraints
  -
- Version
  3.9.1 Update 03
  Status
  affected
  Constraints
  -
- Version
  3.9.1 Update 04
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco Prime Infrastructure

n/a

Version	Status	Constraints
3.10	affected	-
3.10 Update 01	affected	-
3.10.0	affected	-
3.10.1	affected	-
3.10.2	affected	-
3.10.3	affected	-
3.10.4	affected	-
3.10.4 Update 01	affected	-
3.10.4 Update 02	affected	-
3.10.4 Update 03	affected	-
3.10.5	affected	-
3.10.6	affected	-
3.10.6 Update 01	affected	-
3.10.6 Update 02	affected	-
3.2.0-FIPS	affected	-
3.2.1	affected	-
3.2.2	affected	-
3.3.0	affected	-
3.3.0 Update 01	affected	-
3.3.1	affected	-
3.4.0	affected	-
3.4.1	affected	-
3.4.1 Update 01	affected	-
3.4.1 Update 02	affected	-
3.4.2	affected	-
3.4.2 Update 01	affected	-
3.5.0	affected	-
3.5.0 Update 01	affected	-
3.5.0 Update 02	affected	-
3.5.0 Update 03	affected	-
3.5.1	affected	-
3.5.1 Update 01	affected	-
3.5.1 Update 02	affected	-
3.5.1 Update 03	affected	-
3.6.0	affected	-
3.6.0 Update 01	affected	-
3.6.0 Update 02	affected	-
3.6.0 Update 03	affected	-
3.6.0 Update 04	affected	-
3.7.0	affected	-
3.7.0 Update 03	affected	-
3.7.1	affected	-
3.7.1 Update 01	affected	-
3.7.1 Update 02	affected	-
3.7.1 Update 03	affected	-
3.7.1 Update 04	affected	-
3.7.1 Update 05	affected	-
3.7.1 Update 06	affected	-
3.7.1 Update 07	affected	-
3.8.0	affected	-
3.8.0 Update 01	affected	-
3.8.0 Update 02	affected	-
3.8.0-FED	affected	-
3.8.1	affected	-
3.8.1 Update 01	affected	-
3.8.1 Update 02	affected	-
3.8.1 Update 03	affected	-
3.8.1 Update 04	affected	-
3.9.0	affected	-
3.9.0 Update 01	affected	-
3.9.1	affected	-
3.9.1 Update 01	affected	-
3.9.1 Update 02	affected	-
3.9.1 Update 03	affected	-
3.9.1 Update 04	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27861		Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey		Vendor Advisory