Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
CWE-862