Skip to content

Standard Reader

Tag

Credential-leak

Articles and publications tagged Credential-leak across the Atmosphere.

1article1publication

Articles

Publications

ivanova

ivanovaOct 24, 2026

A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

A caller-supplied subdomain is string-substituted into the OAuth2 token URL, and the client secret travels in the form body. The 0.53.0-0.55.0 regression is the part the advisory does not mention.

You've reached the end.