CVE-2017-16632

CVE-2017-16632 describes a weak encryption vulnerability in SapphireIMS 4097_1, where user passwords stored in the database are only Base64 encoded, not properly encrypted. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to easily decode stored passwords, leading to full compromise of user accounts and sensitive data. While no public exploits, Metasploit modules, or KEV entries exist, and community discussion is minimal, the ease of exploitation makes it a significant risk if an attacker gains database access.