ServiceNow has published guidance for its customers related to Access Control List (ACL) misconfigurations after an AppOmni security report found that 70% of the instances they tested had the issue.

That ACL is causing the problem is notable because although SaaS product providers have become more security-conscious, role-based access control has remained a consistent method for granting ...

A flaw in ServiceNow could have allowed threat actors to exfiltrate sensitive data from other user’s tables without them ever knowing, security experts have warned.