writeups.xyz / SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

Submitter : c2a

Date: 17 July 2024

Bounty : undisclosed

Vulnerabilities :

• AI
• Cloud
• Kubernetes
• Privilege Escalation
• Missing Authentication

Programs :

• SAP

Authors :

• Hillai Ben-Sasson (@Hillai)
• Shir Tamari (@Shirtamari)
• Nir Ohfeld (@Nirohfeld)
• Sagi Tzadik (@Sagitz_)
• Ronen Shustin (@Ronenshh)

Link :
https://www.wiz.io/blog/sapwned-sap-ai-vulnerabilities-ai-security