
Merry Christmas from SAP
I received a notification from them on Christmas Day!
While you were sighing your way through Microsoft's Patch Tuesday, enterprise vendor SAP slid 11 security advisories under your door. Top of the list is a depressingly familiar howler in SAP Cloud Connector pre-version 2.11.3: the software neglects authentication checks for functions that require user identity (CVE-2019-0246 …
We just got inflicted with SAP.
Sure it's fine for it's core product, but it's tentacles reach far and wide, and before you know it, it's infected the company like a virus, and users that don't need or want sap are logging hours worked in a terminal program, like it's 1970 all over again.
Truly horrendous when you have modern tools that just need a web browser and are fluid and intuitive.
Biting the hand that feeds IT © 1998–2021