Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-45901. PoCs published by Victor Hanna, 9lyph.
AI-analyzed exploit summary This exploit performs username enumeration in ServiceNow by leveraging a vulnerability in the password reset functionality. It brute-forces a list of usernames and checks for valid users based on HTTP response codes.
Description
The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.
Exploits (2)
This exploit performs username enumeration in ServiceNow by leveraging a vulnerability in the password reset functionality. It brute-forces a list of usernames and checks for valid users based on HTTP response codes.
This repository contains a Python script for enumerating valid usernames in ServiceNow by exploiting a discrepancy in HTTP responses during password reset requests. The PoC automates the process by leveraging session tokens, CSRF tokens, and X-UserToken extracted from client-side code.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N