ServiceNow tells customers a bug left some of their data exposed to the internet

Cloud technology giant ServiceNow appears to have notified some of its enterprise customers that a software bug on its platform was allowing anyone on the internet to access their data. A knowledge base article, which ServiceNow has hidden behind a login wall but has been shared on Reddit, says the company on June 5 patched some customer instances to fix a bug that had allowed unauthenticated users to “gain greater access” to ServiceNow-hosted data than intended. The bug allowed potentially anyone to obtain data stored in customer instances without requiring credentials, such as a password. It’s not clear who had improper access to ServiceNow customers, what data was accessed or taken, or if any group was involved.

…

Excerpt limited to ~120 words for fair-use compliance. The full article is at TechCrunch.