ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs

A high-severity security flaw has been disclosed in ServiceNow's platform that, if successfully exploited, could result in data exposure and exfiltration. The vulnerability, tracked as CVE-2025-3648 CVSS score: 8.2, has been described as a case of data inference in Now Platform through conditiona...

CVE-2025-3648

creationtimestamp| type| source ---|---|--- 2025-07-08 16:21:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818527951888809 2025-07-08 17:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lththhxrdw2i 2025-07-10 05:24:00+00:00| seen|...