← Database

CVE-2021-45901

MEDIUM CVSS: 5.3 Published: 2022-02-10 Modified: 2026-06-17

Description

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

Affected Platforms

Servicenow Servicenow

Weakness Type

CWE-203

References