CVE:CVE-2022-43684
CNNVD:CNNVD-202306-997
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。
多款ServiceNow产品存在安全漏洞，该漏洞源于存在访问控制不正确。以下产品和版本受到影响：Quebec Patch 10 Hot Fix 8b之前版本、Rome Patch 10 Hot Fix 1之前版本、San Diego Patch 7之前版本和Tokyo Tokyo Patch 1之前版本。
solution:Upgrade servicenow servicenow to a higher version than quebec:patch_1_hotfix_1,quebec:patch_10,quebec:patch_10_hotfix_3,quebec:patch_10_hotfix_3a,quebec:patch_10_hotfix_3b,quebec:patch_10_hotfix_4,quebec:patch_2,quebec:patch_2_hotfix_1,quebec:patch_2_hotfix_2,quebec:patch_3,quebec:patch_4,quebec:patch_4_hotfix_2,quebec:patch_5,quebec:patch_6,quebec:patch_7,quebec:patch_8,quebec:patch_9,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_1_hotfix_3,rome:patch_10,rome:patch_2,rome:patch_2_hotfix_1,rome:patch_2_hotfix_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_10_hotfix_1,san_diego:patch_10_hotfix_1a,san_diego:patch_10_hotfix_1b,san_diego:patch_10_hotfix_2,san_diego:patch_10_hotfix_2b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,tokyo,utah,and avoid the version quebec:patch_1_hotfix_1,quebec:patch_10,quebec:patch_10_hotfix_3,quebec:patch_10_hotfix_3a,quebec:patch_10_hotfix_3b,quebec:patch_10_hotfix_4,quebec:patch_2,quebec:patch_2_hotfix_1,quebec:patch_2_hotfix_2,quebec:patch_3,quebec:patch_4,quebec:patch_4_hotfix_2,quebec:patch_5,quebec:patch_6,quebec:patch_7,quebec:patch_8,quebec:patch_9,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_1_hotfix_3,rome:patch_10,rome:patch_2,rome:patch_2_hotfix_1,rome:patch_2_hotfix_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_10_hotfix_1,san_diego:patch_10_hotfix_1a,san_diego:patch_10_hotfix_1b,san_diego:patch_10_hotfix_2,san_diego:patch_10_hotfix_2b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,tokyo,utah