In the CyberArk integration, if no credential ID is provided or cannot be found, the system attempts to look up the credential by IP address. If the IP address is a substring of another, the lookup fails. For example, if the system attempts to find credential for 10.1.1.0, and the address 10.1.1.011 also exists in CyberArk, the lookup fails. This is a CyberArk limitation.
Steps to Reproduce
Configure CyberArk to a credential for IP addresses 10.1.1.0 and 10.1.1.011.
Create a record for the credential in the ServiceNow instance that is either blank or has an invalid credential ID.
Note that Discovery fails to authenticate on the target IP.
If you are able to upgrade, review the Fixed In field to determine the versions that have a permanent fix.
Related Problem: PRB715059