A vulnerability in the way ServiceNow manages user access control lists can easily allow a threat actor to steal sensitive data ...