Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-4769 EUVD-2022-52066GHSA-8r7j-pj39-v7xh

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Published Apr 3, 2023 · Updated Feb 11, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name. 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.2 9.3.0.2

References