CVE-2020-25250: High severity hyland onbase vulnerability
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client applications can write arbitrary data to the server logs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25250?
CVE-2020-25250 is classified as a medium severity vulnerability due to its potential impact on server log integrity.
How do I fix CVE-2020-25250?
To fix CVE-2020-25250, you should upgrade all Hyland OnBase installations to the latest versions above 20.3.10.1000.
What types of systems are affected by CVE-2020-25250?
CVE-2020-25250 affects Hyland OnBase versions 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below, and 20.3.10.1000 and below.
What kind of exploit is possible with CVE-2020-25250?
An attacker could exploit CVE-2020-25250 by sending arbitrary data to be written in the server logs, potentially leading to log injection attacks.
Is there a patch available for CVE-2020-25250?
Yes, a patch is available by updating to the versions of Hyland OnBase that are not affected by CVE-2020-25250.