CVE-2022-43770CWE-863

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Medium · published April 11, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perform an authorization check in the dashboard editor plugin API.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-04-11T15:48Z
EPSS history
Timeline
  • 11 APR 15:48Z
    Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
    cvelistv5