CVE-2022-43939

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Vantara Pentaho Business Analytics Server

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

3. Apr 2023

Ausgewertete Quellen

• Hersteller
  https://support.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-…
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-43939
• CISA
  Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
• NVD
  CVE-2022-43939