Skip to content
OpenAdvisories
High · 8.8 CVE-2022-43773 EUVD-2022-46743GHSA-6qp6-ff76-4rgh

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource

Published Apr 3, 2023 · Updated Feb 11, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled. 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.2, 9.4.0.0 – < 9.4.0.1 9.3.0.2

References