GitHub Advisoryadvisory · PyPI

GHSA-535g-62r7-cx6v Nautobot Single Source of Truth (SSoT) has an unauthenticated ServiceNow configuration URL

MEDIUM Published 2025-10-21 Modified 2025-10-22 Official page ↗
Aliases
CVE-2025-62607
Ecosystem
PyPI
Packages
nautobot-ssot
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-306
Reviewed
2025-10-21

Affected packages

• PyPI nautobot-ssot: < 3.10.0 → fixed in 3.10.0

Description

The servicenow config URL is using a generic django View with no authentication. URL: `/plugins/ssot/servicenow/config/` Impact _What kind of vulnerability is it? Who is impacted?_ An Unauthenticated attacker could access this page to view the Service Now public instance name e.g. `companyname.service-now.com`. This is considered low-value information. This does not expose the Secret, the Secret Name, or the Secret Value for the Username/Password for Service-Now.com. An unauthenticated member would not be able to change the instance name, nor set a Secret. There is not a way to gain access to other pages Nautobot through the unauthenticated Configuration page. Patches _Has the problem been patched? What versions should users upgrade to?_ We highly recommend upgrading to SSoT v3.10.0 which includes this patch. Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ Disable the servicenow SSoT integration

Related

Alias · CVE (1)

  • CVE-2025-62607 Nautobot Single Source of Truth (SSoT) is an app for Nautobot. vulnerability

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References