High severity7.5NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026
CVE-2017-16629
CVE-2017-16629
Description
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sapphireims:sapphireims:4097_1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 4097_1
Patches
Vulnerability mechanics
References
2- vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/nvdThird Party Advisory
- vuln.shellcoder.party/tags/sapphireims/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.