writeups.xyz / ServiceNow Insecure Access Control To Full Admin Takeover

Submitter : c2a

Date: 26 June 2023

Bounty : undisclosed

Vulnerabilities :

• Broken Access Control
• Privilege Escalation
• Account Takeover

Programs :

• ServiceNow

Authors :

• Rezk0n (@Rezk0n)

Link :
https://x64.sh/posts/ServiceNow-Insecure-access-control-to-admin/