Denial of service

2023-04-0319:15:00

PRIOn knowledge base

www.prio-n.com

denial of service

hitachi vantara

business analytics

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt).

CPENameOperatorVersion
vantara_pentaho_business_analytics_serverlt9.3.0.2

CPE	Name	Operator	Version
	vantara_pentaho_business_analytics_server	lt	9.3.0.2

References

support.pentaho.com/hc/en-us/articles/14455209015949--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4770-