Cross-user information disclosure via key-store authorization

Incorrect authorization in Cisco APIC's key store allows local users with valid credentials to read other users' sensitive information. The key store applies insufficient authorization limits when a logged-in user requests information belonging to another account. Exploitation requires a valid account and local device access; the reported consequence is cross-user disclosure, not data modification or service interruption.