web analytics

ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs – Source:thehackernews.com

Rate this post

Source: thehackernews.com – Author: .

A high-severity security flaw has been disclosed in ServiceNow’s platform that, if successfully exploited, could result in data exposure and exfiltration.
The vulnerability, tracked as CVE-2025-3648 (CVSS score: 8.2), has been described as a case of data inference in Now Platform through conditional access control list (ACL) rules. It has been codenamed Count(er) Strike.
“A vulnerability has

Original Post url: https://thehackernews.com/2025/07/servicenow-flaw-cve-2025-3648-could.html

Category & Tags: –

Views: 13

LinkedIn
Twitter
Facebook
WhatsApp
Email

advisor pick´S post