Posts and replies

Security researchers reveal over 1000 misconfigured #ServiceNow instances that leak sensitive corporate info

The leak comes from ServiceNow Knowledge Base feature that use a different permissions system. The exposed info include PII, internal system details, credentials, and access tokens for production systems.

Administrators are advised to review ServiceNow configurations and prevent unauthorized access, especially from the public

#cybersecurity #misconfiguration

https://www.bleepingcomputer.com/news/security/over-1-000-servicenow-instances-found-leaking-corporate-kb-data/