This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.
CWE-200, NVD-CWE-noinfo