AppOmni said 70% of the ServiceNow instances they tested had an Access Control List misconfiguration.