PT-2020-10743 · Servicenow · Servicenow It Service Management

Published 2020-05-05 · Updated 2020-05-12 · CVE-2019-20768

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ServiceNow IT Service Management versions Kingston through Patch 14-1 ServiceNow IT Service Management versions London through Patch 7 ServiceNow IT Service Management versions Madrid before patch 4

Description The issue allows stored XSS via crafted sysparm item guid and sys id parameters in an Incident Request to "service catalog.do".

Recommendations For ServiceNow IT Service Management versions Kingston through Patch 14-1, apply patch 14-1 or later to resolve the issue. For ServiceNow IT Service Management versions London through Patch 7, apply patch 7 or later to resolve the issue. For ServiceNow IT Service Management versions Madrid before patch 4, apply patch 4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "service catalog.do" endpoint until a patch is available. Avoid using the sysparm item guid and sys id parameters in the affected endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-20768

Affected Products

Servicenow It Service Management

References · 6

• 🔥 https://outpost24.com/blog/Responsible-disclosure-Multiple-stored-XSS-vulnerabilities-discovered-in-ServiceNow-ITSM · Exploit
• https://osv.dev/vulnerability/CVE-2019-20768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20768 · Security Note
• https://t.me/cibsecurity/11856 · Telegram Post
• https://t.me/cvenotify/3570 · Telegram Post
• https://outpost24.com/blog?tags=307 · Note