CVE-2025-0337

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0337", "assignerOrgId": "303448ea-6ef3-4077-ad29-5c9bf253c375", "state": "PUBLISHED", "assignerShortName": "SN", "dateReserved": "2025-01-08T17:26:47.145Z", "datePublished": "2025-03-06T16:29:12.094Z", "dateUpdated": "2025-03-06T16:41:58.850Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Now Platform", "vendor": "ServiceNow", "versions": [{"lessThan": "Washington DC Patch 9", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "Xanadu Patch 4", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "Yokohama", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Jean-Michel Huguet from the NATO Cyber Security Centre (NCSC)"}, {"lang": "en", "type": "finder", "value": "Justin Hocquel from the NATO Cyber Security Centre (NCSC)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. <br><br><span style=\"background-color: rgb(255, 255, 255);\">This issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners. </span><span style=\"background-color: rgb(255, 255, 255);\">&nbsp;</span><br>"}], "value": "ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. \n\nThis issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 7.1, "baseSeverity": "HIGH", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "303448ea-6ef3-4077-ad29-5c9bf253c375", "shortName": "SN", "dateUpdated": "2025-03-06T16:29:12.094Z"}, "references": [{"url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1948695"}], "source": {"discovery": "UNKNOWN"}, "title": "Authorization bypass in Now Platform", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-06T16:41:51.687542Z", "id": "CVE-2025-0337", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-06T16:41:58.850Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0337", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-06T16:41:51.687542Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-06T16:41:55.734Z"}}], "cna": {"title": "Authorization bypass in Now Platform", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Jean-Michel Huguet from the NATO Cyber Security Centre (NCSC)"}, {"lang": "en", "type": "finder", "value": "Justin Hocquel from the NATO Cyber Security Centre (NCSC)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ServiceNow", "product": "Now Platform", "versions": [{"status": "affected", "version": "0", "lessThan": "Washington DC Patch 9", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "Xanadu Patch 4", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "Yokohama", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1948695"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. \n\nThis issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners.", "supportingMedia": [{"type": "text/html", "value": "ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. <br><br><span style=\"background-color: rgb(255, 255, 255);\">This issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners. </span><span style=\"background-color: rgb(255, 255, 255);\">&nbsp;</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "303448ea-6ef3-4077-ad29-5c9bf253c375", "shortName": "SN", "dateUpdated": "2025-03-06T16:29:12.094Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0337", "state": "PUBLISHED", "dateUpdated": "2025-03-06T16:41:58.850Z", "dateReserved": "2025-01-08T17:26:47.145Z", "assignerOrgId": "303448ea-6ef3-4077-ad29-5c9bf253c375", "datePublished": "2025-03-06T16:29:12.094Z", "assignerShortName": "SN"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Now Platform", "vendor": "ServiceNow", "versions": [{"lessThan": "Washington DC Patch 9", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "Xanadu Patch 4", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "Yokohama", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "psirt@servicenow.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. \n\nThis issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners."}, {"lang": "es", "value": "ServiceNow ha solucionado una vulnerabilidad de omisi\u00f3n de autorizaci\u00f3n que se identific\u00f3 en la versi\u00f3n de Washington de Now Platform. Esta vulnerabilidad, si se explota, podr\u00eda permitir que un usuario autenticado acceda a datos no autorizados almacenados en Now Platform a los que, de otro modo, el usuario no tendr\u00eda derecho a acceder. Este problema se soluciona en los parches y la versi\u00f3n de la familia que se indican, que se han puesto a disposici\u00f3n de los clientes alojados y autoalojados, as\u00ed como de los socios."}], "id": "CVE-2025-0337", "lastModified": "2026-06-17T08:26:18.270", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@servicenow.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@servicenow.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0337", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-03-06T16:41:51.687542Z", "version": "2.0.3"}}]}, "published": "2025-03-06T17:15:22.303", "references": [{"source": "psirt@servicenow.com", "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1948695"}], "sourceIdentifier": "psirt@servicenow.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "psirt@servicenow.com", "type": "Secondary"}]}

{}

{}