CVE-2017-16629

CVE-2017-16629 describes an information disclosure vulnerability in SapphireIMS 4097_1 where an attacker can enumerate valid usernames by observing distinct error messages on the login form. This vulnerability has a CVSS score of 7.5 (High), indicating a significant risk due to its network-based attack vector, low attack complexity, and high confidentiality impact, allowing unauthorized access to user information. While there is no evidence of active exploitation, nor publicly available exploit code, the vulnerability's nature makes it a potential target for reconnaissance. The low EPSS score and lack of community discussion suggest it is not widely prioritized, but it remains a critical weakness for affected systems.