CVE-2021-45446 Pentaho Business Analytics Server - Exposure of Information Through Directory Listing

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory...

CVE-2021-45446

CVE-2021-45446 affects Hitachi Vantara Pentaho Business Analytics Server prior to 9.2.0.2 and 8.3.0.25. The issue is that the hidden property is not cascaded to the children of the Home folder, allowing an attacker to list an entire directory index. This is a directory-traversal-style exposure th...