PT-2017-10922 · Unknown · Stop User Enumeration

Mallory Adams · Published 2017-11-17 · Updated 2026-01-23 · CVE-2017-1000226

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Stop User Enumeration version 1.3.8

Description The issue allows user enumeration via the REST API.

Recommendations For version 1.3.8, consider disabling the REST API until a patch is available to prevent user enumeration.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-1000226

Affected Products

Stop User Enumeration

References · 4

• 🔥 https://security.dxw.com/advisories/stop-user-enumeration-rest-api · Exploit
• https://osv.dev/vulnerability/CVE-2017-1000226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000226 · Security Note
• https://t.me/cveNotify/149744 · Telegram Post