SAP NetWeaver AS Java Licensing Issue Vulnerability (CNVD-2023-28121)

SAP NetWeaver AS Java is a German SAP (SAP) company provides a Java runtime environment for the application server. The product is mainly used to develop and run Java EE applications. An authorization issue vulnerability exists in SAP NetWeaver AS Java version 7.50, which stems from a failure to perform the required authorization checks. An attacker could use the vulnerability to connect to an open port and access server data using the Open Naming and Directory API.