NetSight
critical9.1

CVE-2020-25256

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below.

Impact

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. PKI certificates have a private key that is the same across different customers' installations.

Affected products

VendorProductAffected versions
HylandOnbase
through 16.0.2.83
from 17.0.0.0 through 17.0.2.109
from 18.0.0.0 through 18.0.0.37
from 19.0.0.0 through 19.8.16.1000
from 20.0.0.0 through 20.3.10.1000

Weakness classification

References