Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits

This talk traces a penetration test of an SAP system in the RISE cloud environment, from environment setup and component analysis to exploitation of SAP Start Service vulnerabilities that enable remote code execution. It also presents recommendations and related SAP documentation and CVEs.