CVE-2022-43940

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service. 

Score

CVSS 3.1 8.8 High

Status

Modified - security.vulnerabilities@hitachivantara.com

Published

2023-04-03

Last modified

2025-02-11

Weaknesses

CWE-863

Affected products

• Vantara Pentaho Business Analytics Server (Hitachi)
• Pentaho Business Analytics Server (Hitachi Vantara)

References

• https://support.pentaho.com/hc/en-us/articles/14456609400973--Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versio…