Skip to content
OpenAdvisories
High · 8.8 CVE-2022-43940 EUVD-2022-46910GHSA-x57h-h95f-93cr

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Published Apr 3, 2023 · Updated Feb 11, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service. 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.2, 9.4.0.0 – < 9.4.0.1 9.3.0.2

References