Lucene search
PRIOn knowledge basePRION:CVE-2022-43939HistoryApr 03, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-04-0319:15:00
PRIOn knowledge base
www.prio-n.com
6
design flaw
logic flaw
hitachi vantara
pentaho
business analytics server
security restrictions
non-canonical urls
circumvention
nvd
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vantara_pentaho_business_analytics_server | lt | 9.3.0.2 | |
| vantara_pentaho_business_analytics_server | eq | 9.4.0.0 |
References
packetstormsecurity.com/files/172296/Pentaho-Business-Server-Authentication-Bypass-SSTI-Code-Execution.html
support.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939-
Related
nvd
nvd
CVE-2022-43939
2023-04-03 19:15:07
cve
cve
CVE-2022-43939
2023-04-03 19:15:07
cvelist
cvelist
packetstorm
packetstorm
zdt
zdt
metasploit
metasploit
Pentaho Business Server Auth Bypass and Server Side Template Injection RCE
2023-05-09 19:24:51
rapid7blog
rapid7blog
Metasploit Wrap-up
2023-05-12 17:41:20
exploitdb
exploitdb