ServiceNow Platform Authorization Bypass (CVE-2025-0337)

ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access data stored within the Now Platform that the user otherwise would not be...

CVE-2025-0337

ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise wou...

CVE-2025-0337

creationtimestamp| type| source ---|---|--- 2025-03-06 16:33:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6696 2025-03-06 19:41:40+00:00| seen| https://t.me/cvedetector/19721 2025-03-06 19:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhq2j22y 2025-03-08...

CVE-2025-0337

CVE-2025-0337 describes an authorization bypass in the Now Platform (Washington release) where an authenticated user could access data they are not entitled to. The vulnerability is addressed via patches and a family release made available to hosted and self-hosted customers and partners. Connect...