ServiceNow AI Platform Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the ServiceNow AI Platform. This issue allows low-privileged users to bypass access restrictions and execute a limited range of actions usually reserved for users with higher privileges, potentially leading to unauthorized modifications of data.

Impact

Exploitation of this vulnerability could result in unauthorized data changes by allowing low-privileged users to access and modify data or perform actions typically restricted to higher-privileged users.

Remediation

Users can apply the patches available in the Washington DC Patch 10 Hot Fix 2a, Xanadu Patch 7a, Xanadu Patch 8, Yokohama Patch 1a, or Yokohama Patch 2.