CVE-2022-4770CWE-209

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Medium · published April 3, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt).

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00435 · 36.7th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2023-04-03T18:56Z
EPSS history
Timeline
  • 03 APR 18:56Z
    Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
    cvelistv5