ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs

An article by The Hacker News unravels recent security vulnerabilities that impact several platforms, highlighting critical risks for data exposure and system security.

A high-severity flaw in ServiceNow called CVE-2025-3648 could enable unauthorized data access through ACL misconfigurations, making sensitive information vulnerable. Furthermore, vulnerabilities in Lenovo's TrackPoint software and Windows Kerberos expose systems to privilege escalation and denial of service, respectively. It's crucial for enterprises to address these bugs to secure their digital environments.

• ServiceNow’s conditional ACL rules can expose sensitive data.
• Lenovo’s software flaw allows privilege escalation through DLL hijacking.
• Windows Kerberos vulnerability risks domain controller stability.
• Companies should implement security patches to mitigate these threats.