CVE-2017-16629

In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login…

published August 11, 2021

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01168 · 66.9th percentile
Published
2021-08-11T20:08Z
EPSS history
Timeline
  • 11 AUG 20:08Z
    In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login…
    cvelistv5