NEW SERVICENOW FLAW LETS ATTACKERS ENUMERATE RESTRICTED DATA

Summary from the TLDR InfoSec newsletter

A new flaw in ServiceNow, named Count(er) Strike, allows users to view restricted data by counting records without full access. It was identified by Varonis Threat Labs in February under CVE-2025-3648. The vulnerability is particularly relevant for configurations with misconfigured or overly permissive ACLs. While ServiceNow introduced new access control frameworks in the latest versions, administrators are advised to review their tables to ensure data security.