ginger

Ginger Ginger 是一个开源安全评估工具，用于评估给定 Pentaho BA 应用实例的安全性。 请记住，该项目仍在开发中，并非所有功能都可能存在或按预期工作。 使用方法 Ginger 只有一个必填参数，即目标 Pentaho 安装的 URL： user@host:$ python gynger.py http://localhost:8080/pentaho 注意：不要包含尾部斜杠 / 这样做将以匿名模式启动 Ginger，功能有限。如果已知有效凭据，则应提供这些凭据： user@host:$ python gynger.py...

EUVD-2016-1702

Malware in sbrugna...

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization...

Pentaho BA Server EE 9.3.0.0-428 Server-Side Template Injection / Remote Code Execution

Title: Pentaho BA Server EE 9.3.0.0-428 - RCE via Server-Side Template Injection Unauthenticated Author: dwbzn Date: 2022-04-04 Vendor: https://www.hitachivantara.com/ Software Link: https://www.hitachivantara.com/en-us/products/lumada-dataops/data-integration-analytics/download-pentaho.html...

CVE-2016-10701

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...

Cross site request forgery (csrf)

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...

CVE-2016-10701

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...

CVE-2016-10701: Cross-Site Request Forgery (CSRF)

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...