CVE-2022-23342

MEDIUM

Hyland Onbase <20.3.58.1000, 21.1.1-21.1.15 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-23342. PoCs published by InitRoot.

AI-analyzed exploit summary The repository provides a detailed writeup and proof-of-concept for CVE-2022-23342, which involves username enumeration in Hyland OnBase due to differential error responses during authentication. The vulnerability allows unauthenticated attackers to identify valid Active Directory usernames via the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint.

Description

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration against the underlying Active Directory integrated systems.

Exploits (1)

nomisec WRITEUP 3 stars
by InitRoot · poc
https://github.com/InitRoot/CVE-2022-23342

The repository provides a detailed writeup and proof-of-concept for CVE-2022-23342, which involves username enumeration in Hyland OnBase due to differential error responses during authentication. The vulnerability allows unauthenticated attackers to identify valid Active Directory usernames via the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Hyland OnBase (versions prior to 20.3.58.1000 and 21.1.1.1000 through 21.1.15.1000)
No auth needed
Prerequisites: Network access to the OnBase application server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/InitRoot/CVE-2022-23342

Scores

CVSS v3 5.3
EPSS 0.0120
EPSS Percentile 64.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (1)
hyland/onbase < 20.3.58.1000
Published Jun 21, 2022
Tracked Since Feb 18, 2026