A missing authorization vulnerability in the Cisco Evolved Programmable Network Manager (EPNM) web interface allows authenticated, low-privileged attackers to access sensitive session data and potentially compromise the entire device.

This vulnerability is caused by improper authorization checks within a REST API endpoint. An authenticated user with low privileges can query this endpoint to retrieve session information for other users, including those with administrative access.

The ability for a low-privileged user to access administrative session data poses a severe threat to the integrity and confidentiality of the entire network management environment. With a CVSS score of 8.0, this high-severity flaw enables lateral movement and full system takeover. Such unauthorized access can lead to widespread operational disruption, data exfiltration, and loss of control over network infrastructure.

Immediate Action: Review the official Cisco security advisory for available software updates and apply them to all affected EPNM instances as soon as they are published.

Proactive Monitoring: Monitor REST API access logs for unusual patterns or high-frequency requests targeting sensitive management endpoints by low-privileged user accounts.

Compensating Controls: Implement strict network access control lists (ACLs) to restrict access to the EPNM web-based management interface to authorized management subnets only.

Public Exploit Available: No (exploit_available unknown)

Given the high CVSS score and the potential for total system compromise, administrators should treat this vulnerability with high urgency. Prioritize identifying all affected EPNM installations and ensure that patching procedures are executed immediately upon the release of vendor-supplied firmware or software updates to prevent potential unauthorized access.