ServiceNow Discloses Security Incident Exposing Customer Data
ServiceNow said a patch on June 5 limited access to authenticated users after attackers queried customer instance tables, while it evaluates a CVE.
- ServiceNow applied a security update on Friday to fix a bug that allowed unauthenticated users to gain greater access to ServiceNow-hosted data than intended.
- Administrators on Reddit identified the flaw at a REST endpoint configured with 'requires_authentication=false,' which permitted unauthenticated requests to access instance data.
- ServiceNow warned that "The security issue pertains to customers who are on the Australia platform release or made certain configuration changes to instances on releases prior to Australia."
- Attackers exploited the vulnerability to query customer instance tables, prompting ServiceNow to notify impacted customers via direct Support cases after detecting "anomalous activity."
- Numerous Administrators are advised to review logs for API requests from IP address '51.159.98.241' and rotate credentials or tokens shared through Support workflows.
18 Articles
18 Articles
BleepingComputer
ServiceNow discloses security incident exposing customer data
ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances.
ServiceNow Patches Data Exposure Vulnerability in Another Reminder That CX Runs on Security
ServiceNow has disclosed a security vulnerability that allowed unauthenticated users to gain access to customer systems. The enterprise software company said it applied a security update to hosted customer environments on June 5 and contacted those affected. A spokesperson told CX Today: “ServiceNow recently applied a security update to hosted customers. The update concerned a security issue that could allow an unauthenticated user, in certain c…
ServiceNow Notifies Customers After Bug Exposed Some Hosted Data
ServiceNow has notified some enterprise customers that a platform bug may have allowed unauthenticated users to access data hosted in customer instances. The company patched some customer instances on June 5 and said the activity it observed came from security researchers and customer research teams, not malicious actors. A ServiceNow knowledge base article described the issue as allowing unauthenticated users to gain greater access to ServiceNo…
ServiceNow fixes API issue after reports of suspicious tenant activity
ServiceNow is notifying customers after discovering and remediating a vulnerability that could have exposed data via an unauthenticated API endpoint on affected instances. The issue emerged publicly after customers began discussing security notifications from ServiceNow and reports of suspicious activity linked to their environments. According to the company’s advisory, the vulnerability was initially reported through ServiceNow’s bug bounty pro…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
