thumbnail Critical SAP flaw allows remote attackers to bypass authentication