New Business Rule on User Table in Yokohama Patch 5

[Tim Deniston]

A new business rule was inserted on the sys_user table with Yokohama Patch 5. The BR is called "Prevent invalid country code" and has a sys_id of 3b638e8338596210f8773223ad5a62dd. This is causing an issue with updating users all of a sudden. If a user has an invalid Country value, all of a sudden no updates can occur on the user until this is corrected. This may be a problem for anyone who has LDAP or Azure AD pushing Country values that don't exactly conform to what ServiceNow is expecting. The Country field has historically been a string field with choices that have inconsistent values (US and USA and United States, for example). Starting with Yokohama Patch 5, these apparently need to all be corrected. 

The Yokohama Patch 5 release notes do not mention this new BR but it's sure having a big impact. 

[Tim Deniston]

My original Now Support case indicated there was an "important security issue" that was not yet announced. The only important security issue that has been announced since then is this CVE and the timing with patches also lines up. 

[BorisR112699856]

Thank you Tim. Yes, i agree. It makes sense from a timing perspective.
I spotted another BR that was deployed with Patch 4a.

Name: Prevent invalid language code

I still have to see if this creates impact too. So far,  i dont see any log entries.

[DhanaG]

Will there be any impact if we disable the Business Rule

[FilipVacula]

Considering it is fixing a security vulnerability, yes, your ServiceNow instance would be vulnerable to a known vulnerability. I would strongly advise against disabling it.

[sujan_kambli22]

We are experiencing the same issue, as shown in the attached screenshot.
The error message is 'Prevent invalid country code BR'. We attempted to resolve this by adding a condition to check against the sys_id but the solution did not work. Any suggestions for a fix would be greatly appreciated.

Thank you!