Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-43770 EUVD-2022-46740GHSA-j4q7-rgmr-c632

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Published Apr 11, 2023 · Updated Feb 7, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perform an authorization check in the dashboard editor plugin API.   

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 8.3.0.27, 9.0.0.0 – < 9.2.0.4 8.3.0.27

References