CVE-2021-21492

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java (HTTP Service) versions 7.10 through 7.50

Description The issue arises from insufficient validation of logon groups in URLs, leading to a content spoofing issue when directory listing is enabled.

Recommendations For versions 7.10 through 7.50, consider disabling directory listing to minimize the risk of exploitation. As a temporary workaround, restrict access to the HTTP Service until a patch is available.