Nuacht

CSOonline1y

Thousands of NetSuite stores leak sensitive data due to access control misconfiguration

Customers of Oracle subsidiary NetSuite’s ERP offering may be unaware that their custom record types grant unauthenticated access to sensitive data readily consumable via NetSuite’s APIs. Researchers ...