SecurityThe Hacker Newsabout 3 hours ago
SAP Discloses Critical CVSS 10 Flaw
4 min read
SAP disclosed a critical CVSS 10.0 flaw in its Cloud SDK for Python on October 13, allowing OAuth2 credential theft. The vulnerability affects versions 0.45.2 through 0.55.0 and 0.36.1 through 0.36.2, impacting multi-tenant applications on the Business Technology Platform. A fix was released on August 21, but six subsequent releases lacked the patch until version 0.55.1 arrived on September 18.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storySAP
