CVE-2024-5217

Published Jul 10, 2024

Last updated 4 months ago

Exploit known CVSS critical 9.2

Overview

Description: ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.
Source: psirt@servicenow.com
NVD status: Analyzed

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.2
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: ServiceNow Incomplete List of Disallowed Inputs Vulnerability
Exploit added on: Jul 29, 2024
Exploit action due: Aug 19, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov: CWE-697
psirt@servicenow.com: CWE-184

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "69E0078E-1953-4F4F-9D5A-B1A140C4B310"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB5CA109-5DC1-4952-AC15-69FAC332BCA2"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_1_hotfix_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44506775-0370-4583-9236-6C9F646B6622"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_1_hotfix_1a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1A76B918-45DB-49A9-B323-5CB6FF8200AA"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_1_hotfix_1b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "118B4618-8702-4C38-88EE-B41C2C9DBF31"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_1_hotfix_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92BED123-0FFC-4113-B0B6-A1A8BD69F4CF"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76439FC6-2DD2-4AD4-9EB6-A2FEAC10B205"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "98E3E0AF-A341-43BB-91C6-75BBDE695280"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_2_hotfix_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20AC3991-0E5B-4164-807F-0E270B1867BE"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_2_hotfix_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44F86BEB-77D0-41AF-816C-F73B2D9601FE"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_2_hotfix_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C9C467AA-B1A2-4A2A-8363-623232BCBCA0"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D6885DD-230B-468B-B936-7512BE80849D"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_3_hotfix_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1476C240-FCB0-43E3-9C79-2264DB6C200A"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_3_hotfix_1b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9783CA53-CDBD-44F0-B2B9-8C49EBE9FCB4"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "481EC1AA-5863-4641-B67F-CD51416ED0EA"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_4_hotfix_2a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "05587BC2-574F-42B6-A121-7ACFD0691ED5"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_4_hotfix_2b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76D69B8D-02EE-4E3D-9F54-E94F6DB09D5B"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D934721-565F-4707-A32A-B7E4BB9D2DD0"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "122E0C17-B29B-44B9-A37E-745B103AD398"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8BD49264-D243-4625-828C-AF383D826779"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_7a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F601F74-593A-4566-A763-EF05E5138FA7"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_7b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "47D4CC0E-E3F5-49AB-9D92-AC8FFB17A4C0"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8A4CD267-D72A-4F09-BE9B-F008B1804AD9"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26D23EE3-0F88-47F7-ADCD-B74F81A08D9B"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:utah:patch_9_hotfix_1a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38DDACA8-69A9-4047-AD99-A7DDC320EAD8"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9DB67FCA-6127-486F-A866-3D5E63B81C35"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9132AB29-33C1-4825-BAD4-2804C26316B1"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8FCCFB6-DB7E-4DED-A7E0-1C03087754F5"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CFD4017-5B8E-4CAF-B9E5-4A675C11F01A"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0B915FDA-9DCB-43B5-8081-F0690996A3EF"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A74A3197-68F7-4303-A731-B87A8BF3F831"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F6A6F12-4D7A-4FD3-8FD6-C32D797BB810"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "847F9124-F3C6-4C93-9E80-544CB0580C8C"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81880B84-5E9D-4B7F-B1D5-1BF8D25DAF5D"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A58603E3-5AFC-4606-8F9E-1B4FF9A9B843"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ABE64339-EF0B-4430-9768-FA7DE82AA61F"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3E71353-9AFF-4B6D-89BC-A2909A7C5DDF"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EAA2E502-FCBC-404D-8FFA-4601F1D5B747"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2b:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "650956A6-8DE6-4C16-A77C-2B208B41DF5F"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:vancouver:patch_8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C641B881-7379-448A-A785-3381C72F8353"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:washington_dc:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FFAC3BF9-2443-4C43-B67A-2BB99297D295"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "444DD275-789F-4C07-9D98-BBFAA1640DB3"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2a:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1DA447CA-A6A2-436C-9909-3F0419B7DD6F"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D18E2CD1-AC8E-4ABF-88DE-D3E61A297ED1"
          },
          {
            "criteria": "cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6137BB81-6B48-4DCB-A9F6-A27D869C12FC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 4.0

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

References