Debian bug report #703388; potential privacy issues as any user can list all other users/their details, etc.
Link to bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703388
Short summary: Normal users can login to admin interface and list data of all other users.