Salesforce OmniStudio Improper Preservation of Permissions Vulnerability Allowing Exposure of Custom Settings Data

A vulnerability in Salesforce OmniStudio (FlexCards) prior to version 254 allows for the improper preservation of permissions, leading to the exposure of Custom Settings data. This issue affects both Core and managed packages within OmniStudio.

Impact

Exploitation of this vulnerability could result in unauthorized access to Custom Settings data, potentially exposing sensitive information.

Remediation

Users should review the affected components (Flexcards) and verify that individuals experiencing data access issues have the necessary field-level security and permissions. User profiles or permission sets may need to be updated to restore the expected data visibility.