A high-severity security flaw has been disclosed in ServiceNow’s platform that, if successfully exploited, could result in data exposure and exfiltration.The vulnerability, tracked as CVE-2025-3648 (CVSS score: 8.2), has been described as a case of data inference in Now Platform through conditional access control list (ACL) rules. It has been codenamed Count(er) Strike.”A vulnerability has
First seen on thehackernews.com
Jump to article: thehackernews.com/2025/07/servicenow-flaw-cve-2025-3648-could.html
