CVE-2023-5617

🗓️ 28 Feb 2024 23:08:15Reported by HITVANType

Hitachi Vantara Pentaho Data Integration & Analytics display Tomcat version on server erro

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2023-5617 Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information	28 Feb 202422:30	–	cvelist
Vulnrichment	CVE-2023-5617 Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information	28 Feb 202422:30	–	vulnrichment
NVD	CVE-2023-5617	28 Feb 202423:15	–	nvd
Prion	Design/Logic Flaw	28 Feb 202423:15	–	prion

Nvd

Node

hitachi vantara_pentaho_data_integration_and_analyticsRange<9.3.0.6

hitachi vantara_pentaho_data_integration_and_analyticsRange9.4.0.0–10.1.0.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Pentaho Data Integration & Analytics",
    "vendor": "Hitachi Vantara",
    "versions": [
      {
        "lessThan": "9.3.0.6",
        "status": "affected",
        "version": "1.0",
        "versionType": "maven"
      },
      {
        "lessThan": "10.1.0.0",
        "status": "affected",
        "version": "9.4.0.0",
        "versionType": "maven"
      }
    ]
  }
]

Source	Link
support	www.support.pentaho.com/hc/en-us/articles/24313358254861--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Server-generated-Error-Message-Containing-Sensitive-Information-Versions-before-10-1-0-0-and-9-3-0-6-including-all-versions-before-10-0-x-Impacted-CVE-2023-5617

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2024 23:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.3

EPSS0.00063

SSVC