A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-13 17:28 UTC
- Importiert: 2026-10-19 16:46 UTC
- Quelle-ID:
thn_global - uid_hash:
e0c38690209bb39ffb48ec44d415575bd5edd2ab6798dcd73af17b5938f73788
Inhalt
| No data |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| The Hacker News | security_news | - | de | https://feeds.feedburner.com/TheHackersNews |