Description
A vulnerability exists in the Web Dynpro chat application named Real Time Collaboration (RTC). An unauthenticated user can retrieve the list of SAP users, groups and roles.
Remediation
Install SAP Security Note 2255990.
References
Related Vulnerabilities
WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.8)
WordPress Plugin IP Blacklist Cloud Arbitrary File Disclosure (3.42)
WordPress Plugin Pike Firewall Information Disclosure (1.4)
WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)