CVE-2016-3973

published 2016-04-07

CVE-2016-3973: The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing "Add users", and doing a search, aka SAP Security Note 2255990.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_application_server_java	7.10 – 7.50	—

CWE-200