Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Wasif
Tera Guru
Tera Guru

There's a terminology in cybersecurity known as TOCTOU- Time Of Check to Time Of Use.
This concept means that when a resource's condition is checked and when it is actually used, there should not be a change in the conditions that was checked earlier to the time it got executed, which would then open up for security vulnerabilities...

Async business rules execute on a similar line where a condition is checked and then put in the sys_trigger table for execution and there is a possibility that the condition may change or updated, and hence the condition needs to be verified again before final execution.

An OOTB system property does exist to neutralize this vulnerability but rarely used.
To have the checks in place create/update this system property to true: glide.businessrule.async_condition_check