EUVD-2015-6873

Malware in sbrugna...

PT-2015-7416

Name of the Vulnerable Software and Affected Versions Pentaho Business Analytics BA Suite versions 4.5.x through 5.2.x Pentaho Data Integration PDI Suite versions 4.3.x through 5.2.x Description The issue concerns the GetResource servlet, which fails to restrict access to files in the...

CVE-2015-6940: Exposure of Sensitive Information to an Unauthorized Actor

The GetResource servlet in Pentaho Business Analytics BA Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration PDI Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict access to files in the pentaho-solutions/system folder, which allows remote attackers to obtain...