Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing snowpick: Testing ServiceNow for Public Data Exposure

Summary

Bishop Fox released snowpick, a tool that tests ServiceNow portals for public data exposure via widget and Table REST APIs from an unauthenticated session; 31% of 166 assessments had findings.
Published
Collected

original ↗

Related coverage

back