Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le avril 28, 2023, 05:10:06

Titre: [kreb]Many Public Salesforce Sites are Leaking Private Data
Posté par: igor51 le avril 28, 2023, 05:10:06

Many Public Salesforce Sites are Leaking Private Data

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to access records that should only be available after logging in.
Source: Many Public Salesforce Sites are Leaking Private Data (https://krebsonsecurity.com/2023/04/many-public-salesforce-sites-are-leaking-private-data/)