Hyland OnBase 19.x and below – Hardcoded PKI Certificates And AES Key Material

Posted by AdaptiveSecurity Consulting via Fulldisclosure on Sep 07

CVSSv3.1 Score
————————————————-
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vendor
————————————————-
Hyland Software – (https://www.hyland.com/en/ and https://www.onbase.com/en/)

Product
————————————————-
Hyland OnBase
All derivatives based on OnBase

Versions Affected
————————————————-
All versions up to and prior to OnBase…