CVE-2022-43684

servicenow

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-43684

Katalog CVE

CVSS 6.5 · Medium EPSS 1,8%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada servicenow. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix 8b * Rome prior to Patch 10 Hot Fix 1 * San Diego prior to Patch 7 * Tokyo prior to Tokyo Patch 1; and * Utah prior to Utah General Availability If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls.

Rincian

Terbit di NVD
13 Juni 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-668: Exposure of Resource to Wrong Sphere
EPSS (30 hari)
1,8% peluang dieksploitasi; lebih tinggi dari 77,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
servicenow servicenow Versi quebec patch_1_hotfix_1
servicenow servicenow Versi quebec patch_10
servicenow servicenow Versi quebec patch_10_hotfix_3
servicenow servicenow Versi quebec patch_10_hotfix_3a
servicenow servicenow Versi quebec patch_10_hotfix_3b
servicenow servicenow Versi quebec patch_10_hotfix_4
servicenow servicenow Versi quebec patch_2
servicenow servicenow Versi quebec patch_2_hotfix_1
servicenow servicenow Versi quebec patch_2_hotfix_2
servicenow servicenow Versi quebec patch_3
servicenow servicenow Versi quebec patch_4
servicenow servicenow Versi quebec patch_4_hotfix_2
servicenow servicenow Versi quebec patch_5
servicenow servicenow Versi quebec patch_6
servicenow servicenow Versi quebec patch_7
servicenow servicenow Versi quebec patch_8
servicenow servicenow Versi quebec patch_9
servicenow servicenow Versi rome patch_1
servicenow servicenow Versi rome patch_1_hotfix_1
servicenow servicenow Versi rome patch_1_hotfix_1a
servicenow servicenow Versi rome patch_1_hotfix_1b
servicenow servicenow Versi rome patch_1_hotfix_2
servicenow servicenow Versi rome patch_1_hotfix_3
servicenow servicenow Versi rome patch_10
servicenow servicenow Versi rome patch_2
servicenow servicenow Versi rome patch_2_hotfix_1
servicenow servicenow Versi rome patch_2_hotfix_2
servicenow servicenow Versi rome patch_3
servicenow servicenow Versi rome patch_3_hotfix_1
servicenow servicenow Versi rome patch_4
servicenow servicenow Versi rome patch_4_hotfix_1
servicenow servicenow Versi rome patch_4_hotfix_1a
servicenow servicenow Versi rome patch_4_hotfix_1b
servicenow servicenow Versi rome patch_5
servicenow servicenow Versi rome patch_5_hotfix_1
servicenow servicenow Versi rome patch_5_hotfix_2
servicenow servicenow Versi rome patch_6
servicenow servicenow Versi rome patch_6_hotfix_1
servicenow servicenow Versi rome patch_6_hotfix_2
servicenow servicenow Versi rome patch_7
servicenow servicenow Versi rome patch_7_hotfix_1
servicenow servicenow Versi rome patch_7a
servicenow servicenow Versi rome patch_7b
servicenow servicenow Versi rome patch_8
servicenow servicenow Versi rome patch_8_hotfix_1
servicenow servicenow Versi rome patch_8_hotfix_2
servicenow servicenow Versi rome patch_9
servicenow servicenow Versi rome patch_9_hotfix_1
servicenow servicenow Versi rome patch_9a
servicenow servicenow Versi rome patch_9b
servicenow servicenow Versi san_diego patch_1
servicenow servicenow Versi san_diego patch_1_hotfix_1
servicenow servicenow Versi san_diego patch_1_hotfix_1a
servicenow servicenow Versi san_diego patch_1_hotfix_1b
servicenow servicenow Versi san_diego patch_10_hotfix_1
servicenow servicenow Versi san_diego patch_10_hotfix_1a
servicenow servicenow Versi san_diego patch_10_hotfix_1b
servicenow servicenow Versi san_diego patch_10_hotfix_2
servicenow servicenow Versi san_diego patch_10_hotfix_2b
servicenow servicenow Versi san_diego patch_2

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 73 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.