Actor Claims Exposed Qara Backend Enabled Live Changes to Saint-Gobain App Deployment
Summary
Actor exfilar alleges Qara’s backend was publicly readable and writable, enabling a persistent change to a Saint-Gobain app deployment and exposing sensitive data across tenants. The claims remain unverified.
Key points
- Actor exfilar claims Qara’s backend databases were publicly readable and writable without authentication.
- The actor says they changed a Saint-Gobain production deployment configuration and verified that the change persisted.
- The alleged exposure involves Qara, an Egyptian supply-chain SaaS platform reportedly used by more than 14 enterprise tenants.
- The reported dump allegedly includes session tokens, database admin keys, and plaintext employee passwords.
- Data tied to a Saudi government health and safety application and financial voucher records was also allegedly exposed.
- The article says the claims remain unverified.
Article Details
- Victim Organization
- Qara; tenant data and a Saint-Gobain app deployment are also implicated in the claims, with Lidl and SPAR named among Qara's enterprise tenants.
- Incident Type
- Alleged unauthenticated public read and write access to Qara's backend, with claimed production deployment configuration changes and exposure of tenant data.
- Data Types Exposed
- Session tokens
- Database administrator keys
- Plaintext employee passwords
- Tenant records
- Records tied to a Saudi government health and safety application
- Financial voucher records
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The actor claims to have changed a Saint-Gobain production app deployment configuration and verified that the change persisted. No operational disruption is confirmed.
- Ransom Or Extortion
- None reported
- Claim Status
- claimed