SAP Management Console get user list
Description
The SAP Management Console (SAP MC) provides a common framework for centralized system management. It allows you to monitor and perform basic administration tasks on the SAP system centrally, which simplifies system administration. The SAP Management Console exposes certain methods which allows an unauthenticated user to access sensitive information such as user list from ABAP syslog through the SAP Management Console SOAP Interface.
Remediation
Install SAP security note 1439348.