Design/Logic Flaw

2022-06-2114:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

JSON

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration against the underlying Active Directory integrated systems.

CPENameOperatorVersion
onbaselt20.3.58.1000
onbasege21.1.1.1000
onbasele21.1.15.1000

Name	Operator	Version
onbase	lt	20.3.58.1000
onbase	ge	21.1.1.1000
onbase	le	21.1.15.1000

References

community.hyland.com/login?returnUrl=/connect/hyland-research-and-development/security-advisories/username-enumeration-in-onbase

github.com/InitRoot/CVE-2022-23342