SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

6 hours ago [email protected] (The Hacker News)

A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP’s official Python client for BTP services. An attacker must be able to control the tenant subdomain,

The post “SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Cloud, Critical Severity, Hacker, Hacker News, Vulnerability

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

6 hours ago [email protected] (The Hacker News)

Vulnerabilities

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

6 hours ago [email protected] (The Hacker News)

Data Breach

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

8 hours ago [email protected] (The Hacker News)

Data Breach

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

11 hours ago [email protected] (The Hacker News)

Vulnerabilities

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

12 hours ago [email protected] (The Hacker News)

Vulnerabilities

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

13 hours ago [email protected] (The Hacker News)