CVE-2020-25252: CSRF
An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default credentials (the wstinol password for the manager or hsi account).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25252?
CVE-2020-25252 is classified as a high severity vulnerability due to its potential for exploitation via Cross-Site Request Forgery (CSRF) using default credentials.
How do I fix CVE-2020-25252?
To fix CVE-2020-25252, it is essential to change the default credentials and apply security patches from Hyland as soon as possible.
What are the affected versions for CVE-2020-25252?
CVE-2020-25252 affects Hyland OnBase versions up to 16.0.2.83, 17.0.2.109, 18.0.0.37, 19.8.16.1000, and 20.3.10.1000.
What type of attack can be performed using CVE-2020-25252?
CVE-2020-25252 allows attackers to perform Cross-Site Request Forgery (CSRF) attacks to log in as a user and execute actions on their behalf.
Is there a workaround for CVE-2020-25252?
While the best practice is to patch the vulnerability, a workaround includes disabling CSRF tokens if feasible and changing default administrative passwords.