PT-2021-14558
CVE-2021-21492
·
تاريخ النشر
2021-04-13
·
تاريخ التحديث
2021-04-20
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Application Server Java (HTTP Service) versions 7.10 through 7.50
Description
The issue arises from insufficient validation of logon groups in URLs, leading to a content spoofing issue when directory listing is enabled.
Recommendations
For versions 7.10 through 7.50, consider disabling directory listing to minimize the risk of exploitation.
As a temporary workaround, restrict access to the HTTP Service until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾