SAPwned: Critical Flaws in SAP's AI Core Expose Sensitive Data

Jul 18, 2024, 09:38 AM

Critical vulnerabilities have been discovered in SAP AI Core platform, which could potentially expose sensitive data and access tokens of businesses utilizing SAP for AI workflows. These flaws, dubbed 'SAPwned,' raise significant concerns about supply chain attacks and unauthorized access to customer data. The vulnerabilities were highlighted after an individual managed to gain admin permissions on several SAP systems by altering their user ID. This breach has brought to light the potential risks associated with SAP's AI platform, emphasizing the need for enhanced cybersecurity measures.