CVE-2020-25252: An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below

High severity · published Sep 11, 2020

CVE-2020-25252

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below

8.8

CVSS

0.5%

EPSS

On KEV

Description

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default credentials (the wstinol password for the manager or hsi account).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 43% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Onbase · Hyland

through 16.0.2.83; 17.0.0.0 through 17.0.2.109; 18.0.0.0 through 18.0.0.37; 19.0.0.0 through 19.8.16.1000; 20.0.0.0 through 20.3.10.1000 · source: NVD

Affected product

Onbase

Hyland

All Onbase CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-25252

CVE.org

https://www.cve.org/CVERecord?id=CVE-2020-25252

Mailing List

https://seclists.org/fulldisclosure/2020/Sep/9