published September 11, 2020
⚠️ SQL injection is lurking in Hyland OnBase, and it’s like letting anyone write in the recipe book without checking their credentials! 🍽️ Imagine a restaurant where anyone can scribble their secret ingredient on the menu without scrutiny. If a rogue chef takes advantage, they could turn a tasty dish into something downright dangerous! An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially allowing them to read or manipulate sensitive data. This means your critical information could be at risk, leading to devastating breaches and loss of trust from your users!
Imagine a restaurant where anyone can scribble their secret ingredient on the menu without scrutiny. If a rogue chef takes advantage, they could turn a tasty dish into something downright dangerous! This SQL injection vulnerability exists in specific functions like TestConnection_LocalOrLinkedServer, CreateFilterFriendlyView, and AddWorkViewLinkedServer, allowing attackers to execute arbitrary SQL commands in the database context if they can trick the application into misinterpreting inputs.
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially allowing them to read or manipulate sensitive data. This means your critical information could be at risk, leading to devastating breaches and loss of trust from your users! To protect yourself, ensure you're running Hyland OnBase version 16.0.2.84 or higher, 17.0.2.110 or higher, 18.0.0.38 or higher, 19.8.16.1001 or higher, or 20.3.10.1001 or higher. Regularly review your database input validation and prompt a security audit to address any potential weaknesses! You’ve got this! Follow these steps to fortify your defenses and keep that kitchen safe! 🛡️