CVE-2026-20189

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:prime_infrastructure::::::::
	cpe:2.3:a:cisco:prime_infrastructure:3.10.6:-::::::
	cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_01::::::
	cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_02::::::

History

29 Jun 2026, 16:53

Type	Values Removed	Values Added
CPE		cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_02:::::: cpe:2.3:a:cisco:prime_infrastructure:::::::: cpe:2.3:a:cisco:prime_infrastructure:3.10.6:-:::::: cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_01::::::
First Time		Cisco prime Infrastructure Cisco
References	~~() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey -~~	() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey - Vendor Advisory

06 May 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-06 17:16

Updated : 2026-06-29 16:53

NVD link : CVE-2026-20189

Mitre link : CVE-2026-20189

CVE.ORG link : CVE-2026-20189

JSON object : View

Products Affected

cisco

prime_infrastructure

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-20189", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20189", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T17:46:03.705407Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Prime Infrastructure", "versions": [{"status": "affected", "version": "3.6.0"}, {"status": "affected", "version": "3.7.0"}, {"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.3.0"}, {"status": "affected", "version": "3.5.0"}, {"status": "affected", "version": "3.2.0-FIPS"}, {"status": "affected", "version": "3.8.0-FED"}, {"status": "affected", "version": "3.9.0"}, {"status": "affected", "version": "3.8.0"}, {"status": "affected", "version": "3.10.0"}, {"status": "affected", "version": "3.9.1"}, {"status": "affected", "version": "3.8.1"}, {"status": "affected", "version": "3.7.1"}, {"status": "affected", "version": "3.5.1"}, {"status": "affected", "version": "3.4.2"}, {"status": "affected", "version": "3.3.1"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.4.1"}, {"status": "affected", "version": "3.10.2"}, {"status": "affected", "version": "3.10.3"}, {"status": "affected", "version": "3.10"}, {"status": "affected", "version": "3.10.1"}, {"status": "affected", "version": "3.7.1 Update 03"}, {"status": "affected", "version": "3.7.1 Update 04"}, {"status": "affected", "version": "3.7.1 Update 06"}, {"status": "affected", "version": "3.7.1 Update 07"}, {"status": "affected", "version": "3.8.1 Update 01"}, {"status": "affected", "version": "3.8.1 Update 02"}, {"status": "affected", "version": "3.8.1 Update 03"}, {"status": "affected", "version": "3.8.1 Update 04"}, {"status": "affected", "version": "3.9.1 Update 01"}, {"status": "affected", "version": "3.9.1 Update 02"}, {"status": "affected", "version": "3.9.1 Update 03"}, {"status": "affected", "version": "3.9.1 Update 04"}, {"status": "affected", "version": "3.10 Update 01"}, {"status": "affected", "version": "3.4.2 Update 01"}, {"status": "affected", "version": "3.6.0 Update 04"}, {"status": "affected", "version": "3.6.0 Update 02"}, {"status": "affected", "version": "3.6.0 Update 03"}, {"status": "affected", "version": "3.6.0 Update 01"}, {"status": "affected", "version": "3.5.1 Update 03"}, {"status": "affected", "version": "3.5.1 Update 01"}, {"status": "affected", "version": "3.5.1 Update 02"}, {"status": "affected", "version": "3.7.0 Update 03"}, {"status": "affected", "version": "3.8.0 Update 01"}, {"status": "affected", "version": "3.8.0 Update 02"}, {"status": "affected", "version": "3.7.1 Update 01"}, {"status": "affected", "version": "3.7.1 Update 02"}, {"status": "affected", "version": "3.7.1 Update 05"}, {"status": "affected", "version": "3.9.0 Update 01"}, {"status": "affected", "version": "3.3.0 Update 01"}, {"status": "affected", "version": "3.4.1 Update 02"}, {"status": "affected", "version": "3.4.1 Update 01"}, {"status": "affected", "version": "3.5.0 Update 03"}, {"status": "affected", "version": "3.5.0 Update 01"}, {"status": "affected", "version": "3.5.0 Update 02"}, {"status": "affected", "version": "3.10.4"}, {"status": "affected", "version": "3.10.4 Update 01"}, {"status": "affected", "version": "3.10.4 Update 02"}, {"status": "affected", "version": "3.10.4 Update 03"}, {"status": "affected", "version": "3.10.5"}, {"status": "affected", "version": "3.10.6"}, {"status": "affected", "version": "3.10.6 Update 01"}, {"status": "affected", "version": "3.10.6 Update 02"}], "defaultStatus": "unknown"}]}], "published": "2026-05-06T17:16:21.360", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server.\r\n\r\nThis vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access.\r\nTo exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device."}], "lastModified": "2026-06-29T16:53:33.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6DE6377-FFFC-439B-95D0-5EC54C215018", "versionEndExcluding": "3.10.6"}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94273457-DA21-40F8-B8E8-A6DA0F5A8300"}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_01:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A33A68B-7264-44F1-AF87-992FBA582FA6"}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_02:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "117F3992-534F-44F7-82CF-1707C17508BF"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}