Shir
@shirtamari
🚨Following our recent vulnerability disclosure with @hugging face and @replicate, today we (@wiz_io) reveal a 3rd critical issue in @SAP AI Core. This vulnerabilities could allow potential attackers to takeover the entire service, accessing customers' AI data and creds 🧵👇
Hillai Ben-Sasson@hillai · Jul 17, 2024I hacked the @SAP AI platform by changing my UID to 1337.
…Yeah, really.
This led to admin permissions on several SAP systems, but also access to customers’ secrets and private AI files 👀
This is the story of #SAPwned 🧵⬇️
…Yeah, really.
This led to admin permissions on several SAP systems, but also access to customers’ secrets and private AI files 👀
This is the story of #SAPwned 🧵⬇️
Open quoted post →
1 29