10 matches found
ginger
Ginger Ginger is an open source security assessment tool that helps in assessing the security of a given Pentaho BA application instance. Please keep in mind that this project is still a work in progress, and not all features might be present or work as intended. Usage Ginger has only one mandato...
EUVD-2016-1702
Malware in sbrugna...
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization...
Pentaho BA Server EE 9.3.0.0-428 Server-Side Template Injection / Remote Code Execution
Title: Pentaho BA Server EE 9.3.0.0-428 - RCE via Server-Side Template Injection Unauthenticated Author: dwbzn Date: 2022-04-04 Vendor: https://www.hitachivantara.com/ Software Link: https://www.hitachivantara.com/en-us/products/lumada-dataops/data-integration-analytics/download-pentaho.html...
CVE-2016-10701
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...
Cross site request forgery (csrf)
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...
CVE-2016-10701
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...
CVE-2016-10701: Cross-Site Request Forgery (CSRF)
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...
PT-2017-7916
Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho BA Platform versions prior to 8.1 Description A CSRF issue exists in the Business Analytics application of the Hitachi Vantara Pentaho BA Platform, which may allow unauthorized actions to be performed. Recommendations F...