fromThe Hacker News
3 days agoServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs
The vulnerability, tracked as CVE-2025-3648 (CVSS score: 8.2), has been described as a case of data inference in Now Platform through conditional access control list (ACL) rules.
Information security