Newgen Software Newgen OmniDocs Information Disclosure Vulnerability

An information disclosure vulnerability exists in Newgen OmniDocs versions prior to 12.0.00. The issue arises in the file '/omnidocs/GetWebApiConfiguration', where the 'connectionDetails' argument can be manipulated to leak sensitive information. This vulnerability can be exploited remotely, although it requires a high level of complexity. A public exploit is available.

Impact

Exploitation of this vulnerability allows unauthorized access to sensitive information, specifically an RSA private key, which could be misused for decryption, token signing, or impersonating trusted services.