Thousands of NetSuite stores leak sensitive data due to access control misconfiguration

August 15, 2024 0 Comments 1 tag

How does this lead to misconfigurations? Let’s assume an administrator creates a CRT with “No Permissions Required.” In adding custom fields, he wants some fields to be readable by unauthenticated