TLDR Tech / InfoSec
ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances (2 minute read)
ServiceNow fixed a misconfigured endpoint that allowed unauthenticated users to query certain customer instances in its Australia release and in some earlier custom setups. Attackers used the bug to run table queries against a subset of tenants starting June 2. ServiceNow traced the issue back to reports received through its bug bounty program in April and early June and directly notified affected customers.
Read the full story