The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2 and 9.3 through 9.3.2 does not properly check privileges which allows remote authenticated users to obtain sensitive information via a crafted URL aka Bug ID CSCud81134.