CVE-2021-45446CWE-548

Pentaho Business Analytics Server - Exposure of Information Through Directory Listing

Medium · published November 2, 2022

CVSS v3.1
5.0
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

A vulnerability in

Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and

8.3.0.25 does not cascade the hidden property to the children of the Home folder.  This directory listing provides an attacker with the complete index of all the resources located

inside the directory.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2022-11-02T14:26Z
EPSS history
Timeline
  • 02 NOV 14:26Z
    Pentaho Business Analytics Server - Exposure of Information Through Directory Listing
    cvelistv5