Description
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。 ServiceNow存在安全漏洞。攻击者利用该漏洞可以在 Now Platform 的环境中远程执行代码。
ServiceNow jvar_page_title 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data/
https://www.cyfirma.com/research/servicenow-rce-cve-2024-4879-vulnerability-analysis-and-exploitation/
https://www.resecurity.com/blog/article/cve-2024-4879-and-cve-2024-5217-servicenow-rce-exploitation-in-a-global-reconnaissance-campaign
https://nvd.nist.gov/vuln/detail/CVE-2024-4879
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293
https://www.traceable.ai/blog-post/service-now-rce---the-three-keys-to-servicenows-data-vault
https://www.deepwatch.com/labs/attackers-exploit-chain-of-vulnerabilities-in-servicenow-to-dump-user-list/
https://juejin.cn/post/7639210162742853672
https://www.resilientx.com/blog/cve-2024-5217-servicenow-vulnerability
https://fortiguard.fortinet.com/cn/outbreak-alert/servicenow-rce