Description
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Vantara | Pentaho Data Integration and Analytics | 1.0 – < 10.2.0.7, 1.0 – < 11.0 | 10.2.0.7 |