Default credentials

2023-04-0319:15:00

PRIOn knowledge base

www.prio-n.com

hitachi vantara

business analytics

server versions

default credentials

big data plugin

system logs

nvd

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

JSON

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs.

CPENameOperatorVersion
vantara_pentaho_business_analytics_serverlt9.3.0.1

CPE	Name	Operator	Version
	vantara_pentaho_business_analytics_server	lt	9.3.0.1

References

support.pentaho.com/hc/en-us/articles/14454594588045--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Insertion-of-Sensitive-Information-into-Log-File-Versions-before-9-4-0-0-and-9-3-0-1-including-8-3-x-Impacted-CVE-2022-43772-