Medium severity5.3NVD Advisory· Published Aug 28, 2017· Updated May 13, 2026
CVE-2017-9978
CVE-2017-9978
Description
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2017/Aug/23nvdExploitMailing ListThird Party Advisory
- www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txtnvdExploitThird Party AdvisoryURL Repurposed
- www.exploit-db.com/exploits/42517/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.