CVE-2022-43772CWE-532

Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File

Low · published April 3, 2023

CVSS v3.1
3.8
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-04-03T18:50Z
EPSS history
Timeline
  • 03 APR 18:50Z
    Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File
    cvelistv5