CVE-2020-25252

CVE-2020-25252 affects Hyland OnBase (multiple versions up to 20.3.10.1000 and below). The issue is a CSRF-driven login vulnerability that uses default credentials (the wstinol password for the manager or hsi account), allowing an attacker to log in a user and then perform actions. Affected versi...