Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-4770 EUVD-2022-52067GHSA-h639-737x-65xp

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Published Apr 3, 2023 · Updated Feb 11, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt). 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.2 9.3.0.2

References