Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-16629
HistoryAug 11, 2021 - 9:15 p.m.

Authentication flaw

2021-08-1121:15:00
PRIOn knowledge base
www.prio-n.com
5

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For “Incorrect User” - it gives an error “The application failed to identify the user. Please contact administrator for help.” For “Correct User and Incorrect Password” - it gives an error “Authentication failed. Please login again.”

CPENameOperatorVersion
sapphireimseq4097.0.1

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

Related for PRION:CVE-2017-16629