Description
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses database passwords when searching metadata injectable fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Vantara | Pentaho Data Integration & Analytics | 1.0 – < 9.3.0.8, 9.4.0.0 – < 10.1.0.0 | 9.3.0.8 |