CVE-2022-43773

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled. 

Score

CVSS 3.1 8.8 High

Status

Modified - security.vulnerabilities@hitachivantara.com

Published

2023-04-03

Last modified

2025-02-11

Weaknesses

CWE-732

Affected products

• Vantara Pentaho Business Analytics Server (Hitachi)
• Pentaho Business Analytics Server (Hitachi Vantara)

References

• https://support.pentaho.com/hc/en-us/articles/14453135249165--Resolved-Pentaho-BA-Server-Incorrect-Permission-Assignmen…