medium4.3
CVE-2023-1158
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of th…
Impact
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Vantara Pentaho | from 8.3.0.0 through 8.3.0.25 |
| Hitachi | Vantara Pentaho Business Analytics Server | from 9.3.0.0 through 9.3.0.3 Version 9.4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.pentaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2023-1158-
- https://support.pentaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2023-1158-