One Bug Wasn’t Enough: Escalating Twice Through SAP’s Setuid Landscape - Anvil Secure

Principal Security Engineer Tao Sauvage discovered two SAP flaws on a client project, resulting in a CVE and a custom tool.