Test ID:	1.3.6.1.4.1.25623.1.0.106149
Category:	Web Servers
Title:	SAP NetWeaver AS Java Information Disclosure Vulnerability (2255990) - Active Check
Summary:	SAP NetWeaver Application Server (AS) Java is prone to an; information disclosure vulnerability.
Description:	Summary: SAP NetWeaver Application Server (AS) Java is prone to an information disclosure vulnerability. Vulnerability Insight: The chat feature in the Real-Time Collaboration (RTC) services allows remote attackers to obtain sensitive user information. Vulnerability Impact: An unauthenticated attacker can get information about SAP NetWeaver AS Java users. Affected Software/OS: SAP NetWeaver AS Java version 7.10 (7.1) through 7.50 (7.5). Solution: See the referenced vendor advisories for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3973 http://seclists.org/fulldisclosure/2016/Jun/46 http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/ https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.