Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Hitachi Vantara Pentaho Business Analytics Server 9.3.0.1 Clear all filters
TI-2022-21506 CVE-2022-43772 · GHSA-4rmp-wcvv-c8xm

Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File

Priority LOW 29

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00392 Published 2023-04-03 Fixed in 9.3.0.1 CWE-532
TI-2022-21505 CVE-2022-43771 · GHSA-84x2-qv2c-9cvx

Path traversal in Hitachi Vantara Pentaho Business Analytics Server

Priority MEDIUM 49

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Access plugin exposes a service endpoint for CSV import which allows a user supplied path to…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.23894 Published 2023-04-03 Fixed in 9.3.0.1 CWE-22