EIP-2026-103320

This is a writeup describing an information disclosure vulnerability in SAP NetWeaver Web Dynpro versions 6.4 to 7.5. It explains how an attacker can enumerate user information by sending a specific HTTP request and interacting with the web interface.