Vulnerabilities > CVE-2022-43939 - Unspecified vulnerability in Hitachi Vantara Pentaho Business Analytics Server 9.4.0.0

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
hitachi
critical
NVD
Published: 2023-04-03
Updated: 2023-05-11

Summary

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. 

Vulnerable Configurations

Part Description Count
Application
Hitachi
2

References