CVE-2022-43940CWE-863

Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

High · published April 3, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-04-03T18:25Z
EPSS history
Timeline
  • 03 APR 18:25Z
    Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
    cvelistv5