Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-1158 EUVD-2023-23441GHSA-3cr4-wh42-gq3c

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Published May 24, 2023 · Updated Jan 16, 2025 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.3, 9.4.0.0 – < 9.4.0.1 9.3.0.3

References