Login Request a demo
Medium severity · published Jun 13, 2023
CVE-2022-43684
ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality
6.5
CVSS
1.8%
EPSS
No
On KEV
Description
ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix 8b * Rome prior to Patch 10 Hot Fix 1 * San Diego prior to Patch 7 * Tokyo prior to Tokyo Patch 1; and * Utah prior to Utah General Availability If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Servicenow · Servicenow
quebec; quebec; quebec; quebec; quebec; quebec; +34 more · source: NVD
Affected product
SE
Servicenow
Servicenow
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-43684
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-43684
packetstormsecurity.com
http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html
seclists.org
http://seclists.org/fulldisclosure/2023/Jul/11
news.ycombinator.com
https://news.ycombinator.com/item?id=36638530
Vendor Advisory
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1303489
x64.sh
https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/
More from Servicenow
9.8
CVE-2024-5217
Incomplete Input Validation in GlideExpression Script
9.8
CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
10.0
CVE-2024-8923
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform
8.8
CVE-2018-7748
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media…
7.5
CVE-2024-8924
ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform