The cloud-based SAP AI Core platform for developing and implementing predictive artificial intelligence (AI) workflows has security flaws that cybersecurity researchers have discovered that might be used to obtain client data and access tokens.
Cloud security company Wiz has collectively named the five flaws as SAPwned.
Security researcher Hillai Ben-Sasson stated in a report shared with The Hacker News that “the vulnerabilities we found could have allowed attackers to access customers’ data and contaminate internal artifacts – spreading to related services and other customers’ environments.”
SAP fixed the flaws as of May 15, 2024, following the responsible disclosure on January 25, 2024.
To put it briefly, the vulnerabilities allow someone to gain unauthorized access to private objects and login credentials for cloud environments read more about SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.