Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2358 EUVD-2023-33849GHSA-cr32-vq7c-r25j

Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

Published Sep 26, 2023 · Updated Sep 23, 2024 · Assigned by HITVAN

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext. 

Affected products

VendorProductAffectedFixed
Hitachi Vantara Pentaho Business Analytics Server 1.0 – < 9.3.0.5, 9.5.0.0 – < 9.5.0.1 9.3.0.5

References