← Toutes les actualitésLire l'article ↗
SAP avertit d'une faille OAuth2 SSRF de sévérité maximale
Titre original (traduit automatiquement) : SAP warns of maximum severity OAuth2 SSRF security flaw
Résumé de la source, en anglais
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python cl...
Texte original (en anglais)
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services.
Source originale
thehackernews.com
2 médias en ont parlé
SAP warns of maximum severity OAuth2 SSRF security flaw ↗
bleepingcomputer.com · 13 oct.