As much as I'd love to snark about SAP
they confirmed the bug the same day and got a patch ready within two weeks without the discoverer having to do anything stupid (we assume). I'm used to seeing vuln disclosures go the other way as of late.
they confirmed the bug the same day and got a patch ready within two weeks without the discoverer having to do anything stupid (we assume). I'm used to seeing vuln disclosures go the other way as of late.