The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads which allows remote authenticated users to obtain sensitive information via a download action as demonstrated by obtaining read access to the user database aka Bug ID CSCul83904.