Description
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including
8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Vantara | Pentaho Data Integration & Analytics | 1.0 – < 9.3.0.5, 9.4.0.0 – < 9.5.0.1 | 9.3.0.5 |