Salesforce Misconfigurations are Exposing Sensitive Data

Originally published by Obsidian Security. Just last week, cybersecurity journalist Brian Krebs shared a post to his website detailing how Salesforce misconfigurations were causing several organizations to inadvertently expose sensitive data to the public.Affected organizations discovered that guest users (accounts that do not require authentication prior to data access) of their Salesforce Experience Cloud websites were able to access private records including full names, Social Security num...

access accounts authentication brian brian krebs cloud cybersecurity data data access experience exposing guest users journalist misconfigurations obsidian obsidian security organizations public salesforce security sensitive data website