CVE-2021-45447CWE-319

Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text

High · published November 2, 2022

CVSS v3.1
7.7
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and

8.3.0.25 with the Data Lineage feature enabled transmits database passwords in clear text.

The transmission of sensitive data in clear text allows unauthorized actors with access to the

network to sniff and obtain sensitive information that can be later used to gain unauthorized

access.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-11-02T14:56Z
EPSS history
Timeline
  • 02 NOV 14:56Z
    Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text
    cvelistv5