SAML flaw in enabled rogue customers to access others’ SaaS data