https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/ta-p/2738760 <P>Early this morning, upon attempting to log into the ServiceNow community portal, a significant anomaly was encountered. The login process was not only disrupted but also exhibited erratic behavior. Users experienced an infinite loop of page refreshes, followed by an unexpected redirection to the ServiceNow product website. This issue was not isolated to a single account but appeared to be a widespread problem.</P> <P>&nbsp;</P> <P>More concerning was a subsequent event where, after several attempts to log in, a user was granted access to the platform under a random user profile. This occurrence is particularly alarming as it suggests a lapse in the authentication process, potentially exposing sensitive user data.<BR /><BR />I got logged in as a random user with name Matt Mclntyre.I m not sure who this person is.</P> <P>&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-11-21 at 9.32.50 AM.png" style="width: 999px;"><img src="https://www.servicenow.com/community/image/serverpage/image-id/306806iA307401A8500C860/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-11-21 at 9.32.50 AM.png" alt="Screenshot 2023-11-21 at 9.32.50 AM.png" /></span></P> Tue, 21 Nov 2023 04:13:14 GMT Amit Gujarathi 2023-11-21T04:13:14Z https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/ta-p/2738760 <P><STRONG>Potential Security Breach in ServiceNow Community Access</STRONG></P> Tue, 21 Nov 2023 04:13:14 GMT https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/ta-p/2738760 Amit Gujarathi 2023-11-21T04:13:14Z https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2738784#M423 <P>I had the same experience.&nbsp;</P> Tue, 21 Nov 2023 05:36:00 GMT https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2738784#M423 Simon Hendery 2023-11-21T05:36:00Z https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2738785#M424 <P>Thank you for identifying this issue&nbsp;<a href="https://www.servicenow.com/community/user/viewprofilepage/user-id/265565">@Amit Gujarathi</a>! This issue has been resolved, and teams are following up to ensure this won't happen again.&nbsp;</P> Tue, 21 Nov 2023 05:36:05 GMT https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2738785#M424 derekrothgordon 2023-11-21T05:36:05Z https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2740193#M425 <P>How we can rest the same.</P> Wed, 22 Nov 2023 05:56:09 GMT https://www.servicenow.com/community/community-resources/potential-security-breach-in-servicenow-community-access/tac-p/2740193#M425 Vineet2 2023-11-22T05:56:09Z