The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6511.json"