An issue exists in the Forgot password function in Innovaphone PBX prior to 14r1 devices. It provides information about whether a user exists on a system.