GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call.Referenceshttp://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf