ServiceNow Now Platform Authorization Bypass Vulnerability

An authorization bypass vulnerability has been identified in the Washington release of the ServiceNow Now Platform. This vulnerability could allow an authenticated user to access unauthorized data within the platform that they would not normally be entitled to. The issue has been addressed in Washington DC Patch 9, Xanadu Patch 4, and the Yokohama General Availability release.

Impact

Exploitation of this vulnerability could lead to unauthorized access to data within the Now Platform.

Remediation

Users can upgrade to Washington DC Patch 9, Xanadu Patch 4, or the Yokohama General Availability release to address this vulnerability.