Salesforce misconfiguration can expose sensitive data

guest · Aug 10, 2021

Salesforce misconfiguration can expose sensitive data
August 10, 2021
https://betanews.com/2021/08/10/salesforce-misconfiguration-expose-sensitive-data/

Researchers at Varonis are warning about a Salesforce misconfiguration that can expose sensitive data to anyone on the internet.

The issue is in the Salesforce Community, which lets Salesforce customers create their own websites to connect with users outside their organization and collaborate.

Varonis researcher Nitay Bachrach says, "At a minimum, a malicious actor could exploit this misconfiguration to perform recon for a spear-phishing campaign. At worst, they could steal sensitive information about a business, its operations, clients, and partners. In some cases, a sophisticated attacker could be able to move laterally and retrieve information from other services integrated with the Salesforce account."
Click to expand...

Varonis has reported the issue to Salesforce but there are likely to be many businesses still exposed as Salesforce has more than 150,000 companies around the globe. Salesforce says it's working on updates to its app to make it harder for admins to expose information accidentally.

Bachrach adds, "This isn't the first time -- and won't be the last time -- a SaaS configuration issue can create a serious security incident. IT and security teams must remain vigilant and continually assess their SaaS exposure."
Click to expand...

Varonis has written a scanner utility to find exposed communities -- which is not being publicly released because it could make life easy for malicious actors -- but companies who think they are affected can get help from the Varonis team.
Click to expand...

Varonis: Abusing Misconfigured Salesforce Communities for Recon and Data Theft

A misconfigured Salesforce Community may lead to sensitive Salesforce data being exposed to anyone on the internet. Anonymous users can query objects that contain sensitive information such as customer lists, support cases, and employee email addresses.

Our research team has discovered numerous publicly accessible Salesforce Communities that are misconfigured and expose sensitive information.

This isn’t the first, nor the last time a SaaS configuration will create a potential security incident, underscoring the need for security teams to continually assess their SaaS exposure.
Click to expand...

Log in or Sign up

Salesforce misconfiguration can expose sensitive data

guest Guest

Log in or Sign up

Salesforce misconfiguration can expose sensitive data

guest Guest

Useful Searches