On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)
CVSS Metrics
