CVE-2020-25251: Critical severity hyland onbase vulnerability

Q: What is the severity of CVE-2020-25251?

CVE-2020-25251 has a high severity rating due to the use of client-side authentication for critical functions.

Q: How do I fix CVE-2020-25251?

To fix CVE-2020-25251, update Hyland OnBase to a version above the vulnerable versions listed.

Q: What versions of Hyland OnBase are affected by CVE-2020-25251?

CVE-2020-25251 affects Hyland OnBase versions 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below, and 20.3.10.1000 and below.

Q: What type of vulnerability is CVE-2020-25251?

CVE-2020-25251 is a security vulnerability related to inadequate client-side authentication.

Q: Can CVE-2020-25251 be exploited remotely?

Yes, CVE-2020-25251 can potentially be exploited remotely due to its client-side authentication issue for critical functions.

Published Sep 11, 2020

Updated

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for critical functions such as adding users or retrieving sensitive information.

Affected Software

5 affected components

Hyland Onbase<=16.0.2.83

Hyland Onbase>=17.0.0.0<=17.0.2.109

Hyland Onbase>=18.0.0.0<=18.0.0.37

Hyland Onbase>=19.0.0.0<=19.8.16.1000

Hyland Onbase>=20.0.0.0<=20.3.10.1000

Event History

Sep 11, 2020

CVE Published

via MITRE·02:20 AM

Data Sourced

via MITRE·02:20 AM

Description

Frequently Asked Questions

What is the severity of CVE-2020-25251?

CVE-2020-25251 has a high severity rating due to the use of client-side authentication for critical functions.

How do I fix CVE-2020-25251?

To fix CVE-2020-25251, update Hyland OnBase to a version above the vulnerable versions listed.

What versions of Hyland OnBase are affected by CVE-2020-25251?