pentester.land· Jul 17, 2024· by Hillai Ben-Sasson (@hillai), Shir Tamari (@shirtamari), Nir Ohfeld (@nirohfeld), Sagi Tzadik (@sagitz_), Ronen Shustin (@ronenshh)

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

Open Original Article ↗
Target Program: SAP
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#AI#Cloud#Kubernetes#Privilege escalation#Missing authentication