CVE:CVE-2022-46886
CNNVD:CNNVD-202304-1218
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。
ServiceNow存在安全漏洞，该漏洞源于存在开放重定向，这允许攻击者在单击service-now域中的URL时将用户重定向到任意域。
solution:Upgrade servicenow servicenow to a higher version than quebec,quebec:patch_10,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_1_hotfix_3,rome:patch_10,rome:patch_10_hotfix_1,rome:patch_10_hotfix_2,rome:patch_10_hotfix_2a,rome:patch_2,rome:patch_2_hotfix_1,rome:patch_2_hotfix_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_6,san_diego:patch_7,san_diego:patch_8,tokyo,tokyo:patch1,and avoid the version quebec,quebec:patch_10,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_1_hotfix_3,rome:patch_10,rome:patch_10_hotfix_1,rome:patch_10_hotfix_2,rome:patch_10_hotfix_2a,rome:patch_2,rome:patch_2_hotfix_1,rome:patch_2_hotfix_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_6,san_diego:patch_7,san_diego:patch_8,tokyo,tokyo:patch1