Mandiant open sources tool to prevent leaky Salesforce misconfigs
ID: 207114a0-449c-57f5-9b0a-c822cd570993
STIX ID: report--207114a0-449c-57f5-9b0a-c822cd570993
Feed Name: The Register (Security)
Threat Score
Mandiant released AuraInspector, a free open-source tool that automates detection of Salesforce Aura misconfigurations which can allow unauthenticated users to access sensitive records (e.g., via getItems or default GraphQL guest access). The article explains common misconfiguration vectors, mitigation guidance embedded in the tool, and references prior incidents where misconfigured Experience Cloud sites leaked sensitive data.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.