Design/Logic Flaw

2020-09-1103:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

JSON

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is desired. This can be problematic for use cases in a regulated industry, where server-side logging is required in additional situations.

CPENameOperatorVersion
onbasege17.0.0.0
onbasele17.0.2.109
onbasege20.0.0.0
onbasele20.3.10.1000
onbasege19.0.0.0
onbasele19.8.16.1000
onbasege18.0.0.0
onbasele18.0.0.37
onbasele16.0.2.83

Name	Operator	Version
onbase	ge	17.0.0.0
onbase	le	17.0.2.109
onbase	ge	20.0.0.0
onbase	le	20.3.10.1000
onbase	ge	19.0.0.0
onbase	le	19.8.16.1000
onbase	ge	18.0.0.0
onbase	le	18.0.0.37
onbase	le	16.0.2.83

References

seclists.org/fulldisclosure/2020/Sep/8